Privileged Access Management Engineer

Job title: Privileged Access Management Engineer

About the Role The Privileged Access Management (PAM) Engineer sits within AIG's Global Identity and Access Management team. The role focuses on expanding the adoption of the CyberArk PAM tool to reduce risk, protect credentials and secrets, and mature our security posture within a zero-trust framework. You will partner with PAM Principal Engineers and development teams to implement strong PAM controls and integrate applications with the PAM service.

What You'll Do

• Support business requests for securing and managing privileged accounts.
• Integrate applications with the PAM tool and extend PAM capabilities.
• Serve as the front line for Privileged Access and work directly with users.
• Partner with engineering and architectural teams to scope PAM requirements and capabilities, including installer plug-ins as needed.
• Support Principal Engineers to identify opportunities to enhance PAM capabilities and drive process improvements.
• Provide training to end-users, admins and DevOps on CyberArk functionality.
• Maintain a clean and compliant environment using Privileged Access knowledge.
• Implement robust monitoring and alerting for the PAM tool and privileged access.
• Define, identify, and inventory privileged access; detect exceptions via automated reporting.
• Make risk-based, data-driven decisions aligned with PAM standards.

What We're Looking For

• Detail-oriented and self-motivated with strong communication skills.
• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• In-depth hands-on PAM experience, ideally with CyberArk (enterprise vault), and a track record of configuring and maintaining the solution.
• CyberArk Defender Certification and proficiency with CyberArk AAM.
• Strong understanding of PAM concepts, IAM, and security best practices.
• Hands-on experience with ServiceNow and Active Directory.
• Conjur Fundamentals certifications.
• Experience administering Secrets and Key management solutions (HashiCorp Vault, AWS Secrets Manager, Keyfactor, Conjur).
• Knowledge of IT infrastructure technologies: LDAP, Windows AD, Azure AD, Okta, etc.
• Experience with Windows, Linux, Unix (AIX, Solaris); databases Oracle, SQL, Postgres.
• Mainframes: RACF, z/OS; familiarity with network protocols.
• Familiarity with authentication security (MFA, certificates) is a plus.

Nice to Have

• Optional/preferred qualifications referenced in the posting but not strictly required.

Compensation & Benefits

• AIG offers a Total Rewards Program and comprehensive benefits focused on health, wellbeing and financial security, plus opportunities for professional development. The role emphasizes in-person collaboration as a core cultural element.