Staff Privileged Access Solutions Manager

Location: Hershey, PA

At The Hershey Company, our culture is rooted in purpose and inspired by Milton Hershey’s enduring vision that business should create opportunity for others. Through our commitment to corporate philanthropy, we create positive impact by supporting communities, helping children thrive, and operating as a business for good. This includes our deep and long-standing partnership with Milton Hershey School, where we invest in education, workforce readiness, and hands-on engagement to help students succeed beyond the classroom. Supported by strategic grantmaking, product donations, cross-brand collaboration, and strong employee volunteerism, Hershey offers a place to work where making a difference—locally and globally—is part of how we do business every day.

The Hershey Company is an industry-leading snacks company known for making more moments of goodness through its iconic brands. With a strong portfolio across chocolate, confectionery, and salty snacks, Hershey delights consumers every day. Our beloved brands include Hershey’s, Reese’s, KitKat®, Dots Pretzels, Lesser Evil, Jolly Rancher, Twizzlers, Ice Breakers, and more. Guided by our employee value proposition, Lead Today. Create Tomorrow, we empower our people to drive impact now while shaping what comes next. Our One Hershey mindset brings teams together across functions, geographies, and businesses, enabling us to operate with speed, collaboration, and shared purpose.

About the role

This is a unique opportunity to lead the evolution of Hershey’s enterprise Privileged Access Management (PAM) program and help protect the company’s most critical systems, credentials, and privileged access pathways. As a strategic leader within the Identity and Access Management (IAM) organization, you will define and execute the vision, roadmap, and operating model for Hershey’s PAM capability. You will drive initiatives that strengthen privileged access controls, support Zero Trust objectives, improve operational maturity, and reduce enterprise security risk across a complex global environment. Working closely with Information Security, infrastructure, application, cloud, audit, compliance, and business teams, you will lead the full PAM lifecycle from strategy and prioritization through implementation, adoption, measurement, and continuous improvement. This role also provides the opportunity to lead and influence managed service providers, offshore operations, and cross-functional project teams while delivering enterprise-wide security outcomes.

Responsibilities

• Define, enhance, and execute the enterprise PAM strategy, roadmap, governance model, and operating standards.
• Lead PAM program planning, prioritization, risk management, resource coordination, and delivery.
• Partner with infrastructure, cloud, application, security, audit, compliance, and business teams to prioritize PAM onboarding and adoption based on risk and business impact.
• Manage the full privileged account lifecycle, including discovery, onboarding, credential vaulting, rotation, access reviews, session monitoring, and decommissioning.
• Expand PAM coverage across administrator accounts, service accounts, application accounts, APIs, secrets, automation credentials, and cloud privileged access.
• Oversee PAM platform operations, vendor relationships, managed service delivery, incident support, and overall program performance.
• Establish metrics, reporting, adoption indicators, and control effectiveness measures to demonstrate risk reduction and program maturity.
• Drive automation, process simplification, operational efficiency, and user experience improvements while maintaining strong security controls.
• Support audits, control testing, investigations, remediation activities, and evidence collection.
• Provide leadership and direction to internal resources, managed service partners, and cross-functional project teams.

Requirements

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field; equivalent experience may be considered.
• 5+ years of experience in information technology, cybersecurity, identity and access management, security operations, security architecture, or security governance.
• 3+ years of experience supporting, implementing, operating, or leading Privileged Access Management capabilities.
• 3+ years of experience leading cross-functional initiatives, technical teams, managed service providers, or partner resources.
• Experience partnering with infrastructure, application, cloud, audit, compliance, security operations, and business stakeholders.
• Experience supporting audit activities, control testing, remediation tracking, evidence collection, and reporting.
• Strong knowledge of privileged account lifecycle management, credential vaulting, session monitoring, access reviews, secrets management, and privileged risk reduction.
• Proven ability to influence stakeholders, prioritize workstreams, drive accountability, and deliver measurable outcomes in a complex enterprise environment.

Preferred Qualifications

• Experience with CyberArk, BeyondTrust, Delinea, HashiCorp Vault, or similar PAM and secrets management platforms.
• Experience integrating PAM solutions with Active Directory, Microsoft Entra ID, SailPoint, ServiceNow, SIEM/SOC tools, cloud platforms, and endpoint privilege management solutions.
• Experience with PowerShell, Python, Java, or similar scripting and automation tools.
• Knowledge of Windows/Linux administration, networking, firewalls, VPNs, DNS, databases, application servers, and secure configuration practices.
• Experience developing PAM metrics, dashboards, reporting, and maturity roadmaps.
• Relevant certifications such as CISSP, CISM, CRISC, Security+, CyberArk, BeyondTrust, Delinea, HashiCorp, Azure, or AWS.

Benefits

• Health & Wellbeing: Medical, dental, and vision coverage, plus wellness programs that support your physical and mental health.
• Financial Security: Competitive pay, annual incentive opportunities, and a 401(k) with company match.
• Time Off & Flexibility: Paid time off, company holidays, and flexible ways of working where applicable.
• Growth & Development: Career development programs, learning opportunities, and internal mobility.