Senior Technical Lead - Privileged Access Management
The Big Picture
About Sysco LABS:
Sysco LABS is the Global In-House Center of Sysco Corporation (NYSE: SYY), the world’s largest foodservice company. Sysco ranks 55th in the Fortune 500 list and is the global leader in the trillion-dollar foodservice industry.
Sysco operates 333 distribution centers across 10 countries, with 75,000 colleagues serving approximately 670,000 customer locations, including restaurants, healthcare and educational facilities, lodging establishments, entertainment venues and more. For fiscal year 2026, which ended June 27, 2026, the company generated sales of more than $84 billion.
Sysco LABS Sri Lanka delivers the technology that powers Sysco’s end-to-end operations.
Sysco LABS’ enterprise technology is present in the end-to-end foodservice journey, enabling the sourcing of food products, merchandising, storage and warehouse operations, order placement and pricing algorithms, the delivery of food and supplies to Sysco’s global network and the in-restaurant dining experience of the end-customer.
The Opportunity
Sysco is looking for a highly skilled, self-motivated enterprising Senior Technical Lead - Privileged Access Management to join our global Cybersecurity Team. In this role, you will lead a team of engineers to support Sysco’s enterprise-wide Privileged Access Management (PAM) infrastructure, ensuring secure access for over 80,000 global users. You will plan, architect, implement, and manage Privileged Accounts (human and non-human identities) for Privileged users and applications using PAM solutions (CyberArk, HashiCorp) provide expert guidance on privileged access, key management, digital certificates, and API’s This role operates as a team player collaborating with other team members to contribute towards building our world-class Cybersecurity Organization.
Sysco invites motivated and forward-thinking candidates to apply for this pivotal role within our organization. Join us in leading the way in identity governance and play a crucial part in the security and efficiency of our operations. This is a highly visible Cybersecurity role where you will be a part of Sysco’s rapid transformation through mergers and acquisitions into a global industry leader. This is an individual contributor role.
This is a hybrid remote and office-based role, aligning with the local job requirement guidelines. Primary shift: [2:00PM-10:00 PM SLST, 3:30 AM-11:30 AM CDT] with flexibility. This role may require a shift rotation to offer global on-call coverage. Most work is performed Monday through Friday virtually using collaboration tools and video conferencing. You’ll be part of a high-performing, security-driven team that values innovation, delivery excellence, and continuous learning.
Responsibilities:
Planning, Designing and implementing PAM solutions at global enterprise.
Provide recommendations for Sysco’s corporate and international infrastructure and security requirements to determine the best approach for PAM implementation and operation.
Collaborate with cross-functional teams (e.g. Cyber, networking, Compliance, Audit, End User Technology) across geographic locations to define the scope, timelines, and deliverables of the implementation project.
Configure and customize PAM components to meet the organization's specific needs and requirements.
Lead the architecture design for privileged access management (PAM) solution for customers.
Review functional and non-functional requirements, apply architecture acceptance criteria, and produce artifacts describing the logical and physical design of solutions scaled for the enterprise.
Acting as a technical leader of the PAM team, mentor and coach team members, fostering a culture of continuous learning.
Provide world-class customer service to Sysco’s internal customers responding to incidence management (Service now) through troubleshooting.
Requirements:
Bachelor’s degree in computer science, Information Systems, Engineering, or a related field; or equivalent work experience.
Master’s degree in information technology, Cybersecurity, or a related discipline.
Overall 8 to 10+ years of experience in IT industry with minimum 5 to 6 years in Privileged Access Management (PAM).
Extensive experience in end-to-end implementation, configuration, and administration of privileged access management (PAM) solutions such as CyberArk Vault, CyberArk Workforce Password Management (WPM) CyberArk End Point Manager (EPM) and HashiCorp Vault.
Strong Knowledge on Cybersecurity principles, best practices and NIST standards, with focus on securing privileged access, key management, human and machine identities, Infrastructure as Code (e.g. Terraform).
Expert level knowledge of privileged access management concepts, best practices and Zero Trust principle.
Familiarity with SailPoint to implement and support CyberArk-SailPoint Integration using SCIM (System for cross-domain Identity Management) protocol.
The person should have exposure knowledge of CyberArk integration with SIEM Tools (Datadog, MS Sentinel, HP ArcSight).
Excellent oral and written communication skills, with the ability to engage with stakeholders across global workforce.
Certifications in Cyber Security.
Certifications in CyberArk Vault, CISSP.
Incident management using Tools like ServiceNow, monitoring Tools like Datadog, MS Sentinel.
Proficiency with authentication and authorization protocols including SAML, OIDC, OAuth2, WS-Fed, Kerberos, and NTLM.
PowerShell, Python, REST API for automation in CyberArk Vault tasks, reporting etc.
CyberArk Vault (On-Prem and SaaS) supporting global enterprises.
CyberArk Workforce Password Management (WPM) and CyberArk End Point Manager (EPM), CyberArk CONJUR solutions.
HashiCorp Vault, Terraform, Dev Ops Tools (Kubernetes, Jenkins etc.).
Integration of privileged management solutions (CyberArk Vault) with tools such as Active Directory, AWS/Azure/GCP, SAML, SMTP, NTP.
Secrets management using Tools like Hashi Corp Vault, AWS Secrets Manager.
Benefits:
Performance-based annual bonus
Performance rewards and recognition
Agile Benefits - special allowances for Health, Wellness & Academic purposes
Entertainment allowance
Team engagement allowance
Comprehensive Health & Life Insurance Cover - extendable to parents and in-laws
Hybrid work arrangement
Sysco LABS is an Equal Opportunity Employer.
Skills Required
- Bachelor's degree in computer science, information systems, engineering, or a related field, or equivalent work experience
- Master's degree in information technology, cybersecurity, or a related discipline
- 8 to 10+ years of overall IT industry experience
- 5 to 6 years of Privileged Access Management experience
- End-to-end implementation, configuration, and administration of CyberArk Vault, Workforce Password Management, Endpoint Manager, and HashiCorp Vault
- Strong knowledge of cybersecurity principles, best practices, NIST standards, privileged access, key management, human and machine identities, and Infrastructure as Code
- Expert knowledge of PAM concepts, best practices, and Zero Trust principles
- Familiarity with SailPoint and CyberArk-SailPoint integration using SCIM
- Experience integrating CyberArk with SIEM tools such as Datadog, Microsoft Sentinel, or HPE ArcSight
- Excellent oral and written communication skills with global stakeholder engagement ability
- Cybersecurity certifications
- CyberArk Vault certification and CISSP certification
- Incident management using ServiceNow and monitoring using Datadog or Microsoft Sentinel
- Proficiency with SAML, OIDC, OAuth2, WS-Fed, Kerberos, and NTLM
- PowerShell, Python, and REST API automation experience
- Experience supporting CyberArk Vault in on-premises and SaaS enterprise environments
- Experience with CyberArk Workforce Password Management, Endpoint Manager, and Conjur
- Experience with HashiCorp Vault, Terraform, Kubernetes, Jenkins, or related DevOps tools
- Experience integrating PAM solutions with Active Directory, AWS, Azure, Google Cloud Platform, SAML, SMTP, and NTP
- Secrets management experience using HashiCorp Vault and AWS Secrets Manager
Sysco Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Sysco and has not been reviewed or approved by Sysco.
-
Healthcare Strength — Multiple national medical plan options with telehealth, behavioral health resources, and targeted programs indicate broad coverage and support. Preventive care access and ancillary offerings (dental, vision, Rx advocacy) further reinforce the package.
-
Retirement Support — A 401(k) with automatic company contributions plus a match, alongside an employee stock purchase plan, underscores solid retirement support. At union locations, enhanced pension terms add to perceived long‑term value.
-
Pay Growth & Progression — Recent collective bargaining outcomes with substantial wage increases demonstrate meaningful pay progression where contracts apply. In high‑volume markets, incentive structures can amplify earnings beyond base rates.
Sysco Insights
What We Do
Sysco is the global leader in selling, marketing and distributing food and related products to customers who prepare meals away from home. This includes restaurants, healthcare and educational facilities, lodging establishments, entertainment venues, and more. Sysco operates almost 340 distribution centers, in over 10 countries, with 76,000 colleagues serving approximately 730,000 customer locations. The company generated sales of more than $81 billion in fiscal year 2025 that ended June 28, 2025. As the world’s largest food-away-from-home distributor, Sysco offers customized supply chain solutions, bespoke specialty product offerings, and culinary support to drive customers to innovate and optimize their operations. We act as a trusted business partner to our customers, helping them grow through our industry-leading portfolio that includes fresh produce, premium proteins, specialty products, sustainably focused items, equipment and supplies, and innovative culinary solutions. For more information, visit www.sysco.com. For important news and key information for Sysco investors, visit the Investor Relations section of the company’s website at investors.sysco.com.
.jpg)
