Cybersecurity Engineer - PAM (Hybrid)

American Family Insurance Agency Staff; Boston (MA); Hybrid; USD 80,000 - 131,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Wellbeing programs

401(k) plan

Pension plan

Annual incentive

Paid holidays

Paid time off

Job summary

American Family Insurance is seeking a Cybersecurity Engineer focused on Privileged Access Management (PAM) with a strong IAM background. The role emphasizes framework development, program optimization, and risk mitigation in a fast-paced environment.

The engineer will work with IT and business teams to design, implement, and optimize PAM and related security solutions, while maintaining documentation and driving security operations improvements. Hybrid work is supported, with travel up to 10%.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or 5+ years in cybersecurity.
• Experience with Privileged Access Management (PAM) and IAM preferred.
• Knowledge of security frameworks, incident response, and risk assessment.

Responsibilities

• Develop, integrate, and test cyber products and PAM solutions.
• Research and implement new security technologies and automation.
• Perform cyber identity incident triage and assess vulnerabilities.
• Maintain security documentation and procedures.

Skills

PAM

IAM

Penetration testing

Threat analysis

Python

PowerShell

Directory services

Cybersecurity

Education

Bachelor's degree in cybersecurity or related field

Tools

Python

PowerShell

Job description

As a Cybersecurity Engineer with American Family Insurance, you will primarily be responsible for creating PAM (Privileged Access Management) solutions. You will also develop a framework, roadmap, and program optimization. Additionally, you will work on process engineering, risk remediation, and mitigation of operational risk. To achieve this, you will introduce technology, requirements, deliverables, gaps, and systems design in a high-velocity culture. Analyze competitive strategies, cyber technologies, metrics models, and performance indicators.

You will report to the Senior Manager, Cybersecurity.

Role not eligible for sponsorship. Not open to relocation.

Position Compensation Range

$80,000.00 - $131,000.00

Pay Rate Type

Salary

Compensation may vary based on the job level and your geographic work location. Relocation support is offered for eligible candidates.

Primary Responsibilities

• Participate in the development, integration, and testing of cyber product
• Research, engineer, and integrate new security solution
• Perform Cyber Identity incident triage, determine potential impact, and identify specific vulnerability
• Participate in the development and maintenance of security system and solution
• Build relationship with peers throughout the company through collaborative engineering operations.
• Participate in the design and implementation of automated solution to meet security need
• Demonstrate strong understanding of Privileged Access Management (PAM) solution
• Collaborate with IT and business team to identify, assess, and mitigate cybersecurity risk
• Maintain documentation, procedure, and standard related to IAM cybersecurity operation
• Develop system-security measure to ensure PAM cybersecurity is fully integrated
• Manage, analyze, and respond to changing system and data access needs for the company and clients

Specialized Knowledge & Skills Requirements

• Demonstrated experience providing customer-driven solution, support, or service
• Basic knowledge and understanding of software engineering architecture, system/software design, and system deployment
• Basic knowledge and understanding of Cyber Security, Cyber Engineering, Computer Science, Software Engineering
• Basic knowledge and understanding of security technology and application development methodology
• Demonstrated experience performing cyber threat analysis and incident response
• Working knowledge of penetration testing
• Solid knowledge and understanding of directory service and identity store

Preferred Qualifications

• Professional certification such as CISSP, CISM, CompTIA Security+, or similar
• Experience with cloud security and hybrid environment
• Hands on experience with identity governance, technical script writing and automation.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; OR minimum 5 years professional experience in cybersecurity
• Minimum 3 years hands‑on experience in Privileged Access Management (PAM)
• Minimum 3 years' experience in Identity and Access Management (IAM)
• Experience in network security and infrastructure management
• Solid understanding of security framework, best practice, and regulatory requirement.
• Python and PowerShell.

Licenses

Not Applicable.

Travel Requirements

Up to 10%.

Physical Requirements

Work that primarily involves sitting/standing.

Working Conditions

Not Applicable.

In this hybrid role you will be expected to work a minimum of 10 days per month out of the Madison, WI, Boston, MA, Hopkins, MN or Englewood, CO offices.

We provide benefits that support your physical, emotional, and financial wellbeing. You will have access to comprehensive medical, dental, vision and wellbeing benefits that enable you to take care of your health. We also offer a competitive 401(k) contribution, a pension plan, an annual incentive, 9 paid holidays and a paid time off program (23 days accrued annually for full‑time employees). In addition, our student loan repayment program and paid-family leave are available to support our employees and their families. Interns and contingent workers are not eligible for American Family Insurance Group benefits.

We are an equal opportunity employer. It is our policy to comply with all applicable federal, state and local laws pertaining to non‑discrimination, non‑harassment and equal opportunity. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.

American Family Insurance is committed to the full inclusion of all qualified individuals. If a reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please email [e-mail] to request a reasonable accommodation.