Pam Engineer

Job Description

Your Platform

Activision Blizzard plays a centralized role in the creation of epic entertainment by supporting our interactive gaming brands and studios with a diverse range of career opportunities across corporate functions such as Marketing, Communications, Legal, Human Resources, Finance and Supply Chain. Located in our global headquarters in Santa Monica, we encompass equal parts agility, creativity and rigor to enhance the employee and player experience. To learn more, check us out at www.activisionblizzard.com or on Twitter at @ATVI_AB.

Your Mission

Activision, the publisher of the hit Call of Duty franchise, is looking for a skilled PAM engineer to join our Activision|Blizzard|King (ABK) Information Security team.

At ABK we aim to deliver the best user experience and business driven processes to manage our identity data, and the authentication and authorization experience for our users. You'll be joining a highly technical team who are charged with a mission to design, build and deliver, an enterprise PAM (Privileged Access Management) solution within our IAM program.

Placing identity at the center of the security decision making process, you'll work on critical initiatives for our enterprise. The ideal candidate will already have extensive experience working as a PAM engineer in a fast-paced technology environment, preferably within an information/cyber security function.

Priorities can often change in a fast-paced environment like ours, so this role includes, but is not limited to, the following responsibilities:
• Compose and contribute to PAM Security strategy, policies, and standards, including provisioning, password management and access policies, key management, and reporting.
• Design, configure, and maintain PAM solutions.
• Integrate the PAM solution with various technologies such as Service Now, Duo, Okta, SailPoint or other top identity and access management solutions.
• Operation of the Privileged Access Management (PAM) technologies, including accounts management, secrets management, and software and systems patching.
• Define and implement automated processes for administration and integration with external services.
• Provide security consultation on internal projects focusing on least privileged access and PAM best practices.
• Authoring and maintaining documentation procedures, inventories, and diagrams for PAM systems and processes.
• Monitors and responds to capacity and performance needs of the PAM infrastructure.
• Provides regular reports to leadership regarding security, capacity, usage, and licensing.
• May be called on for rotational on-call support for production PAM infrastructure systems and processes.

Player Profile

Minimum Requirements:
• Five years of hands-on experience as a PAM engineer.
• Experience securing, administering, and integrating applications to enterprise SSO/authentication platforms, including Microsoft Active Directory, Azure AD, Okta, Ping Identity, and Duo.
• In depth knowledge of, and experience planning and implementing, privileged access controls, segregation of duties, and least privileged access.
• Intimate knowledge of authentication protocols such as LDAP, Kerberos, SAML, OpenID Connect, oAuth, etc.
• Experience with enterprise password management methodologies and tools.
• Good understanding of information security and IAM best practices and principles.
• Good interpersonal skills and ability to communicate effectively with both technical and non-technical collaborators.
• Ability to solve problems independently and drive collaboration with the immediate team and external teams as needed to meet strategic goals.
• Excellent English written and verbal communication skills.
• Willing to travel occasionally (less than 10%).

Extra Points
• BSc in Computer Science, Cyber/Information Security or other related field or experience.
• Experience with secrets management solutions such as HashiCorp Vault.
• Recognized industry certification such as CISSP.

We love hearing from anyone who is enthusiastic about changing the games industry. Not sure you meet all qualifications? Let us decide! Research shows that women and members of other under-represented groups tend to not apply to jobs when they think they may not meet every qualification, when, in fact, they often do! We are committed to creating a diverse and inclusive environment and strongly encourage you to apply.

We are committed to working with and providing reasonable assistance to individuals with physical and mental disabilities. If you are a disabled individual requiring an accommodation to apply for an open position, please email your request to accommodationrequests@activisionblizzard.com General employment questions cannot be accepted or processed here. Thank you for your interest.

Subject to eligibility requirements, the Company offers comprehensive benefits including:
• Medical, dental, vision, health savings account or health reimbursement account, healthcare spending accounts, dependent care spending accounts, life and AD&D insurance, disability insurance;
• 401(k) with Company match, tuition reimbursement, charitable donation matching;
• Paid holidays and vacation, paid sick time, floating holidays, compassion and bereavement leaves, parental leave;
• Mental health & wellbeing programs, fitness programs, free and discounted games, and a variety of other voluntary benefit programs like supplemental life & disability, legal service, ID protection, rental insurance, and others;
• If the Company requires that you move geographic locations for the job, then you may also be eligible for relocation assistance.

Eligibility to participate in these benefits may vary for part time and temporary full-time employees and interns with the Company. You can learn more by visiting https://www.benefitsforeveryworld.com/.

In the US, the standard base pay range for this role is $77,500.00 - $143,376.00 Annual. This base pay range is for the US and is not applicable to locations outside of the US Actual amounts will vary depending on experience, performance and location. In addition to a competitive base pay, employees in this role may be eligible for incentive compensation. Incentive compensation is not guaranteed.

Jobcode: Reference SBJ-rjpn4b-3-142-200-226-42 in your application.