Associate Principal, Privileged Access Management (CyberArk)

Transamerica; Cedar Rapids (IA); Hybrid; USD 122,000 - 162,000; Full time

Benefits offered by this job

Pension Plan

401(k) match

Employee Stock Purchase Plan

Tuition reimbursement

Disability insurance

Medical, dental, and vision insurance

Employee discounts

Career training & development opportun

Diversity and inclusion programs

Employee recognition program

Job summary

Transamerica is seeking a Privileged Access Management (PAM) Associate Principal to lead the delivery and implementation of the PAM program across enterprise environments, including CyberArk deployments and access governance.

You will mentor junior team members, collaborate with PAM Engineering, and present executive-level roadmaps, business cases, and diagrams while ensuring SOX, NYDFS, NIST, and SOC compliance. Remote or hybrid work is supported, with occasional travel.

Qualifications

• Bachelor’s degree or equivalent experience in a related field.
• 10+ years managing privileged access and integrating with LDAP, Windows/UNIX, databases and apps.
• Expert knowledge of Windows, Linux, and Mainframe account management.
• 3+ years scripting automation tasks.
• Experience with safes, vaults, session management and secrets management.
• Leadership competencies including commitment, interpersonal skills, learning aptitude, critical thinking, resourcefulness, and adaptability.

Responsibilities

• Design, implement, and maintain PAM solutions (CyberArk) across enterprise environments.
• Manage privileged accounts across human, non-human, vendor, and cloud environments.
• Act as SME and advocate for Enterprise Technology security.
• Collaborate with PAM Engineering to identify improvements and troubleshoot incidents.
• Mentor junior team members and lead large initiatives with executive visibility.
• Ensure PAM program alignment with SOX, NYDFS, NIST, and SOC requirements.
• Create executive-level materials including diagrams, roadmaps, and business cases.

Skills

Privileged access management

Leadership

Critical thinking

Learning aptitude

Resourcefulness

Communication

Education

Bachelor's degree in computer science or related field

Tools

CyberArk On-Premise

LDAP

Windows

UNIX

Mainframe

Databases

Job description

Job Description Summary

Enterprise Technology is a global organization within Transamerica. We provide application support, data governance, and security for all of Aegon's business units. Our focus is on building AI, cloud, and data frameworks while maintaining a secure, stable technology environment.

Job Description

The Privileged Access Management (PAM) organization manages and governs privileged access across Aegon. As a PAM Associate Principal, you will lead the delivery and implementation of the PAM program.

What You Will Do

• Design, configure, install, integrate, and maintain PAM Solutions (CyberArk) across enterprise environments.
• Implement solutions to manage human, non‑human, vendor, contractor, service, application, and cloud privileged accounts.
• Act as a subject‑matter expert and advocate for Enterprise Technology and our overall security platform.
• Collaborate with PAM Engineering to identify improvements and troubleshoot incidents.
• Assist with troubleshooting privileged‑access‑related issues across the enterprise.
• Support cultural change toward a centralized security‑management program.
• Mentor junior team members.
• Lead large initiatives, presenting and influencing senior leadership.
• Ensure the PAM program satisfies regulatory requirements such as SOX, NYDFS, NIST, and SOC.
• Create and present executive‑level materials—architectural diagrams, roadmaps, business cases.

Qualifications

• Bachelor’s degree in computer science or related field, or equivalent experience.
• 10+ years managing privileged access and integrating with platforms such as LDAP, Windows/UNIX, databases, network devices, and applications.
• Expert knowledge of Windows, Linux, and Mainframe systems and account management across these environments.
• 3+ years scripting automation tasks.
• Experience managing and training on safes, vaults, session management, key managers, credential providers, platforms, and secrets management.
• Behavioral & Leadership Competencies:
  • Commitment
  • Interpersonal Skills
  • Learning Aptitude
  • Critical Thinking
  • Resourcefulness
  • Tolerance of Ambiguity

Preferred

• Extensive experience with CyberArk On‑Premise solutions (CCP, CP, Alero, Secrets Hub, PSM, Conjur).
• CyberArk certification (Sentry/Guardian).
• Knowledge of IAM, network architecture, and security concepts.
• Experience in Agile Scrum and DevSecOps.
• CISSP certification.
• 12+ years of experience in IT/Security.

Working Conditions

• Remote or hybrid position.
• May require international travel.
• May require non‑standard work hours due to global support and a dispersed team.

Compensation

Salary: $122,000–$162,000 annually plus annual bonus potential.

Eligibility for additional benefits and a scope of benefits package described below.

Benefits Package

• Pension Plan
• 401(k) match
• Employee Stock Purchase Plan
• Tuition reimbursement
• Disability insurance
• Medical, dental, and vision insurance
• Employee discounts
• Career training & development opportunities

Health and Work/Life Balance Benefits

• Paid Time Off: 160 hours annually for new employees.
• 10 paid holidays per year.
• Wellness program with coaching and reward dollars.
• Parental leave: 15 paid days per calendar year.
• Adoption assistance.
• Employee assistance program.
• Back‑up care program.
• PTO for volunteer hours.
• Employee matching gifts program.
• Employee resource groups.
• Diversity and inclusion programs.
• Employee recognition program.
• Referral bonus programs.

Inclusion & Diversity

Transamerica is committed to a respectful and inclusive work environment. We encourage diverse perspectives and have a variety of employee‑driven resources and programs to support inclusion.

Required Eligibility

Applicants must be authorized to work in the United States. We do not sponsor work visas for this position.