Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 70 days ago

Associate Principal – Non-Human Identity (NHI) Lead

PepsiCo2,586 open roles

Pay
$93,500 – $156,450 a year
Where
Plano, Texas, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAssociate Principal – Non-Human Identity (NHI) LeadPepsiCo · Plano, Texas, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on PepsiCo's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. PepsiCo postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 70 days ago

PepsiCo median: 1 days open

The posting

Overview We are seeking a highly experienced Non-Human Identity (NHI) Lead to define and drive the strategic vision, architecture, governance, and implementation of PepsiCo's enterprise Non-Human Identity (NHI) program. The role is responsible for establishing enterprise-wide visibility, lifecycle governance, security controls, policy standards, and risk management for all machine identities, including service accounts, service principals, workloads, API credentials, keys, secrets, certificates, managed identities, bots, and emerging AI Agents. The individual will lead the enterprise NHI roadmap, governance model, platform strategy, and onboarding programs while partnering with Security, Cloud, Infrastructure, Application Development, DevOps, Platform Engineering, Architecture, Risk & Compliance, and Business teams. This role requires deep expertise in Identity Security, Cloud Security, Secrets Management, Machine Identity Management, Zero Trust Architecture, and AI Agent Identity Security. The successful candidate will combine strategic leadership with strong technical architecture skills to enable secure, scalable, and automated management of NHI’s across PepsiCo. Responsibilities Enterprise NHI Implementation Define and own the enterprise-wide NHI vision, strategy, roadmap, and multi-year maturity plan. Establish enterprise standards, policies, and governance frameworks for NHI management. Build and drive program across Cybersecurity, S&T, Cloud, Infrastructure, and Engineering teams. Lead global NHI transformation initiatives and drive adoption across all sectors and business units. Develop KPI/KRI metrics and provide executive reporting to IAM leadership, CISO, and governance boards. Establish NHI operating models, ownership models, and accountability frameworks. Architecture & Platform Leadership Define target-state architecture for: NHI Discovery, NHI Lifecycle Management, NHI Identity Governance, Secrets Management, Certificate Management, AI Agent Identity Management Lead architecture reviews for NHI designs across cloud and enterprise platforms. Develop enterprise integration patterns for: AWS, Azure, GCP, SaaS platforms, DevOps platforms, Containerized workloads, AI Platforms Establish architecture standards for: Workload identities, Service principals, Managed identities, Kubernetes identities, Secrets, Certificates, Machine-to-machine authentication NHI Discovery & Governance Lead implementation and adoption of enterprise NHI discovery capabilities. Establish a centralized inventory of: Service Accounts, Secrets, API Keys, Certificates, Service Principals, Managed Identities, Bot Identities, AI Agent Identities Define enterprise ownership attribution strategy. Establish risk scoring and classification models. Drive remediation of: Orphaned NHIs, Dormant Accounts, Excessive Privilege, Long-Lived Credentials, Unmanaged Secrets, Policy Violations Govern enterprise-wide access review and certification processes for NHI populations. NHI Lifecycle Management Define and implement enterprise lifecycle processes for machine identities: Creation, Modification, Rotation, Recertification, Decommissioning Drive automation of NHI onboarding and provisioning workflows. Integrate lifecycle processes into: IGA Platforms, PAM Platforms, CMDB, DevOps Toolchains, ServiceNow Establish NHI access governance and least-privilege controls. Secrets & Machine Identity Security Define enterprise secrets management strategy. Establish governance for: Encryption Keys, API Credentials, Certificates, Managed Secrets, OAuth Clients Drive adoption of automated credential rotation. Lead migration from static credentials toward workload identity-based authentication. Define policies for secrets lifecycle management and compliance monitoring. Risk, Compliance & Governance Partner with Security, Audit, Risk, and Compliance teams. Establish policy frameworks, dashboards aligned with: NIST, ISO 27001, CIS Controls, CSA AI Controls Matrix, Zero Trust Architecture Lead audit readiness activities. Ensure compliance with regulatory and internal security requirements. Develop measurable compliance and remediation programs. Compensation and Benefits: The expected compensation range for this position is between $93,500 - $156,450. Location, confirmed job-related skills, experience, and education will be considered in setting actual starting salary. Your recruiter can share more about the specific salary range during the hiring process. Bonus based on performance and eligibility target payout is 10% of annual salary paid out annually. Paid time off subject to eligibility, including paid parental leave, vacation, sick, and bereavement. In addition to salary, PepsiCo offers a comprehensive benefits package to support our employees and their families, subject to elections and eligibility: Medical, Dental, Vision, Disability, Health, and Dependent Care Reimbursement Accounts, Employee Assistance Program (EAP), Insurance (Accident, Group Legal, Life), Defined Contribution Retirement Plan. Qualifications Experience 12+ years in Identity & Access Management or Cybersecurity. 5+ years leading enterprise-scale IAM programs. Demonstrated leadership experience managing global projects and strategic initiatives. Proven experience implementing enterprise identity strategies and roadmaps. NHI Expertise Strong expertise in: Non-Human Identity Security, Machine Identity Management, Secrets Management, Certificate Management, Workload Identity Security, Cloud Identity Governance, Privileged Access Management, Identity Governance & Administration Hands-on experience with platforms such as: Veza, Astrix, Akeyless, HashiCorp Vault, CyberArk, Thales CTM, BeyondTrust, SailPoint, Saviynt Cloud & Architecture Deep hands-on expertise in: AWS, Azure, GCP, Kubernetes, Service Mesh, CI/CD Security, Zero Trust Architecture Technical Skills Strong SQL and database experience (queries, joins, analysis) Hands-on experience with AWS, Azure, Google Cloud Platform (GCP) Working Knowledge of IAM Roles, Managed Identities, Service Accounts, Key Management Services, Cloud-native security controls Experience integrating with SAAS and Enterprise platforms like Entra ID, Sales force, ServiceNow, GitHub, OKTA etc. Strong experience in API & Integration Skills like REST APIs, JSON, OAuth etc. Directory services (LDAP / AD/cloud directories) Reporting & Analytics Experience building dashboards and operational reports Ability to translate raw IAM data into actionable insights Experience in working with large datasets and identity relationships EEO Statement Our Company will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Fair Credit Reporting Act, and all other applicable laws, including but not limited to, San Francisco Police Code Sections 4901-4919, commonly referred to as the San Francisco Fair Chance Ordinance; and Chapter XVII, Article 9 of the Los Angeles Municipal Code, commonly referred to as the Fair Chance Initiative for Hiring Ordinance. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status. PepsiCo is an Equal Opportunity Employer: Female / Minority / Disability / Protected Veteran / Sexual Orientation / Gender Identity If you'd like more information about your EEO rights as an applicant under the law, please download the available EEO is the Law & EEO is the Law Supplement documents. View PepsiCo EEO Policy. Please view our Pay Transparency Statement

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against PepsiCo's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on PepsiCo's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    PepsiCo's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.