Privileged Access Management Engineer

Who We Are:

Kontoor Brands, Inc. (KTB) is the parent company of Wrangler®, Lee® and Rock & Republic®, with owned manufacturing facilities in Mexico and Nicaragua. Kontoor also owns and operates over 140 retail stores across the globe. Our global company employs more than 15,000 people in 65 countries, with world headquarters in Greensboro, North Carolina, and regional headquarters in Geneva and Hong Kong.

Job Posting:

DUTIES AND RESPONSIBILITIES

•    Lead and support the Privilege Access Management (PAM) program
•    Support and expand the Privileged Access Management Platform platform
•    Privilege Access Management reporting and metrics
•    Work closely with the Identity Access Management team, Security Operations, Infrastructure, application owners, and product managers to help drive the identity strategy
•    Work with vendors and third parties to evaluate new products, features, and solutions
•    Ensure regulatory requirements and industry best practices are followed for Identity and Access Management
•    Support large, cross functional, globally distributed, and complex projects
•    Provide evidence for compliance activities
•    On call support of the privileged access management tools
•    Stay current on security technology and trends for identity and access management in manufacturing, ecommerce, and retail
•    Work with operational product owners and various peer teams to integrate Secure Password Vaulting systems and related technologies with end client’s platforms to protect and manage the credentials of critical systems. (Privileged accounts used by applications) 
•    Write scripts or code that will help with customization of the PAM products. The scripting and coding will involve (but not limited to) shell scripting, java, .net. 
•    Perform product evaluation, testing and certification of such secure vaulting systems. This involves system architectural design and subject matter expertise 
•    Ensure that all PAM security products meet or exceed the internal and regulatory requirements. 
•    Produce documentation of processes and procedures for the usage of the product. 
•    Follow the Technology Development Life Cycle in the development of all security tools related to vaulting services. 
•    Ensure that all integration of functions and tools meet the end client’s standards. 
•    Define necessary system enhancements to deploy new products and process enhancements. 
•    Develop, align and maintain the vision, strategy and roadmap for privileged access management with KTB’s Business and Security objectives, along with industry and tech standards and best practices. Lead and support the design and build of PAM technical capabilities.
•    Oversee the expansion and use to technology and processes. Develops business cases that drive the adoption of the tools by proving the benefits. This role will be responsible for preparing for the next stage of transformation for Privileged Access Management, focusing on overall risk reduction, operational efficiency, and usability utilizing automation, data analytics and increased monitoring capabilities
•    Lead the development, implementation, and management of relevant metrics to measure the efficiency and effectiveness of the Privileged Access Management service. Builds capability to monitor automation performance by including bench-marking and tracking performance against service improvements.

WORK EXPERIENCE
Relevant experience in a Privilege Access Management Engineering Role 
•    Minimum of 2 full implementation Experience in implementations and configurations of IAM/PAM systems - 7+ years.

EDUCATION AND/OR CERTIFICATION REQUIREMENTS
•    Bachelor’s in computer science or combination of relevant education, experience, and training 

LIST THE TOP FIVE SKILLS REQUIRED TO PERFORM THIS ROLE
•    Experience in implementations and configurations of IAM/PAM systems. Password/Credential vaulting technologies. Required (expert level) : Privileged Access Management Platform suite of products PAS, PSM,CPM development 
•    Experience writing & managing code developed in any of the following languages Powershell, Beanshell, c#, or java 
•    Hands-on experience working across various cloud environments that include IaaS, PaaS, and SaaS service offerings 
•    Access Management products and solutions preferred: Active Directory Servers/IDM Technologies 
•    Overall experience in all aspects of IAM is strongly desirable (Saviynt) 
•    Good understanding of cloud-based platforms 
 

Why Kontoor Brands?

At Kontoor, we offer a comprehensive benefit package to fit your lifestyle. Our benefits are crafted with the same care as our products.

When our employees are healthy, secure, and well, they bring their best selves to work. Kontoor Brands supports you with a competitive benefits program that provides choice and flexibility to meet your and your family’s needs – now and in the future. We offer resources to support your physical, emotional, social, and financial wellbeing, plus benefits like discounts on our apparel. Kontoor Brands also provides four weeks of Paid Parental Leave to eligible employees who are new parents, Flexible Fridays, and Tuition Reimbursement.

We are proud to offer a workplace culture centered on equitable opportunities and a sense of belonging for all team members. Here we have a global workforce of high-performing teams that both unlocks our individual uniqueness and harnesses our collaborative talents.