Information Security Analyst- PAM

Company Description

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and the environment safer, healthier and more sustainable. From the food you eat to the medicines you rely on, Eurofins works with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic and labelling is accurate. Eurofins is a global leader in food, environmental, pharmaceutical and cosmetic product testing and in agroscience CRO services. It is also one of the global independent market leaders in certain testing and laboratory services for genomics, discovery pharmacology, forensics, CDMO, advanced material sciences and in the support of clinical studies.

In over just 35 years, Eurofins has grown from one laboratory in Nantes, France to 62,000 staff across a network of over 1,000 independent companies in 61 countries, operating 900 laboratories. Performing over 450 million tests every year, Eurofins offers a portfolio of over 200,000 analytical methods to evaluate the safety, identity, composition, authenticity, origin, traceability and purity of biological substances and products, as well as providing innovative clinical diagnostic testing services, as one of the leading global emerging players in specialized clinical diagnostics testing.

Eurofins is one of the fastest growing listed European companies with a listing on the French stock exchange since 1997.

Eurofins IT Solutions India Pvt Ltd (EITSI) is a fully owned subsidiary of Eurofins and functions as a Global Software Delivery Center exclusively catering to Eurofins Global IT business needs. The code shipped out of EITSI impacts the global network of Eurofins labs and services.

The primary focus at EITSI is to develop the next generation LIMS (Lab Information Management system), Customer portals, e-commerce solutions, ERP/CRM system, Mobile Apps & other B2B platforms for various Eurofins Laboratories and businesses. Young and dynamic, we have a rich culture and we offer fulfilling careers.

Job Description

Position title: Information Security Operator - PAM (Privileged Access Management)

Location: Bengaluru, Karnataka, India

Shift timings:  12.00pm to 9.00pm IST

Work mode: Hybrid - 3 Days office

Role Summary

The Privileged Access Management Operator will be responsible for supporting the Privileged Access Management (PAM) services while adhering to Eurofins standards and best practices for the entire environment, working closely with business and IT stakeholders to develop and perform stronger governance of PAM & IAM processes.

Required Professional Expertise:

• Bachelor’s degree on Computer Science or relevant field, ideally with:
• IAM Security certification (Preferred)
• From 3 years of general IT Infra experience
• At least 2 years of Privilege Access Management experience
• Superb English fluency, both spoken and written

Technical Skills:

• Solid Knowledge of BeyondTrust, CyberArk, Observe IT, (any of the 3 but preferably BeyondTrust) (Top 1)
• Experience and working knowledge of IAM/PAM Standards and common best practices including: authentication, authorization, role-based access controls and PAM Governance and Administration (Top 2)
• Strong understanding of Privileged Access Management processes: Top 2

Privileged access controls

• Role Base Access Control and/or Attribute and Policy-based Access Control
• Managed credentials and systems
• Monitoring and SIEM integration
• ITSM integration (ticketing system used)
• Manage Applications Credentials
• User Access Policy Management
• Break Glass procedures (when the solution fails there needs to be a “pushed” immediate solution)
• PowerShell scripting experience (or Python, Perl, etc) (Top 3)
• Strong Windows Active Directory, UNIX, Linux & SSH (Secure Shell key management experience) (Top 3)
• Strong understanding of network hardware configuration and password management options (SSH, LDAP) Light Weight Directory Access Protocols (AD access) (Top 3)
• Strong understanding of Microsoft SQL Databases (understand the functioning of the DBs)
• Strong understanding of authentication methods and techniques (LDAP/AD, others)

Bonus Points:

• Strong knowledge of SAML, Header-Based authentication, SCIM, FIDO, OAuth, Open ID connect and REST concepts
• Strong understanding of the information security domains
• Experience with different services, technologies within cloud environments like AWS, Azure, GCP

Essential Duties and Responsibilities:

• Responsible for creating, maintaining (new control to be added, or a policy, new industry requirement/changes to keep up with standard, etc) and monitoring the policies on PAM solutions.
• Ability to document and define PAM target state processes and gather business requirements (proof of concept to extend the capabilities we currently have, biz acumen and requirement to leverage and find the right solutions)
• Support security-related assessments and configurations for PAM platforms and provide a recommendation of the best practices for implementation (response to audit findings and match with the right solution based on a crossed analysis of those findings)
• Develop and report risk metrics (KPIs/KRIs) as well periodic scorecards consumed by management for the PAM program
• Keep pace with emerging IAM and PAM technology, cyber threats, and industry trends around cybersecurity
• Establishes and refines procedures and other business processes to detect errors and inconsistencies in privileges (technologies and biz/process) for general architectural future understanding.
• Support detailed reporting and root cause analysis with various internal technology teams
• Build relationships and serve as a liaison between system/application owners and the internal technology team for governance and security-specific initiatives