Privileged Access Management Engineer

About the role

The Privileged Access Management (PAM) Engineer will join AIG’s Global Identity and Access Management team to drive adoption of CyberArk and strengthen the company’s zero‑trust security posture. You will work closely with principal engineers and development teams to secure privileged accounts, credentials, and secrets across the enterprise.

Key responsibilities

• Integrate applications with CyberArk, install marketplace plug‑ins, and extend PAM capabilities to meet business needs.
• Provide front‑line support for privileged access requests, delivering training to end‑users, admins, and DevOps on CyberArk functionality.
• Implement monitoring, alerting, and automated reporting to maintain a compliant privileged environment.
• Collaborate with engineering and architecture teams to define requirements, identify enhancement opportunities, and contribute to process improvements.

Required profile

• Detail‑oriented, self‑motivated professional with strong customer focus and communication skills.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Hands‑on experience as a PAM practitioner, preferably with enterprise‑scale CyberArk deployments.

Required skills

• CyberArk (AAM) and CyberArk Defender Certification.
• ServiceNow, Active Directory, LDAP, Azure AD, Okta.
• Secrets and key management solutions: Hashicorp Vault, AWS Secrets Manager, Keyfactor, Conjur.
• Operating systems: Windows, Linux, Unix (including AIX and Solaris).
• Databases: Oracle, SQL, PostgreSQL.
• Mainframe security: RACF, z/OS.
• Knowledge of MFA, certificates, and general security best practices.