Privileged Access Management Engineer

Overview

In this role you will strengthen and evolve AIG’s privileged access controls within the zero-trust framework. You will partner with PAM Principal Engineers and engineering teams to integrate applications with CyberArk, manage privileged accounts and secrets, and monitor the security posture. You’ll train users, support process improvements, and enforce compliant, auditable access across the environment. This position offers hands-on work with CyberArk, IAM concepts, and cross-functional collaboration to reduce risk at scale.

Pay / Benefits

• Total Rewards Program
• health and wellbeing benefits
• financial security provisions
• professional development

Responsibilities

• Integrate applications with the PAM tool and extend PAM service capabilities
• Manage privileged accounts and secrets across environments
• Serve on the front line of Privileged Access with users
• Collaborate with engineering and architecture to scope PAM requirements beyond out-of-the-box
• Install and configure marketplace plug-ins to drive adoption
• Identify opportunities to enhance PAM capabilities and drive process improvements
• Provide training on CyberArk functionality to end-users, Admins and DevOps
• Maintain clean, compliant PAM environment and implement monitoring/alerts
• Inventory privileged access and detect policy exceptions via automated reporting
• Make risk-based, data-driven decisions aligned with PAM standards

Key requirements

• Hands-on PAM practitioner with enterprise vault experience (CyberArk preferred)
• CyberArk Defender Certification
• Proficiency with CyberArk AAM
• Strong understanding of IAM and security best practices
• Experience with ServiceNow and Active Directory
• Conjur Fundamentals certifications
• Experience with Secrets/Key management solutions (HashiCorp Vault, AWS Secrets Manager, Keyfactor, Conjur)
• Knowledge of LDAP/AD, Windows/Linux/UNIX environments, databases, and mainframes (RACF, z/OS)
• Familiarity with MFA and certificate-based authentication
• Bachelor’s degree in Cybersecurity, IT, or related field

• Customer-focused with ability to communicate technical concepts to non-technical audiences
• Detail-oriented and self-motivated
• Strong collaborative and cross-functional teamwork
• Privileged Access Management (PAM)
• CyberArk (AAM, Defender)
• Zero-trust security concepts

…