PAM Engineer: CyberArk Cloud & Automation

Aon plc; Northern (KY); Hybrid; USD 92,000 - 130,000; Full time

Benefits offered by this job

401(k) savings plan with employer

Employee stock purchase plan

Long-term incentive awards

Medical, dental and vision insurance

Paid time off with holidays and leave

Job summary

Aon plc is seeking a Privileged Access Management Engineer to strengthen and evolve our identity and privileged-access security capabilities. You will engineer, implement and support PAM solutions with a strong focus on CyberArk Cloud, onboarding applications and maintaining access policies.

You will collaborate with architecture and engineering teams, develop automation with PowerShell or Python, and contribute to an Agile delivery environment to enhance security for critical systems.

Qualifications

• 3+ years of relevant experience in privileged access, identity security or related security engineering.
• Hands-on experience implementing, developing or supporting CyberArk, with CyberArk Cloud strongly preferred.
• Experience with PAM operational activities such as credential onboarding, access administration, policy configuration and API-based credential access.
• Experience with endpoint privilege management technologies such as BeyondTrust EPM or CyberArk EPM.
• Hands-on experience supporting Windows and/or Linux infrastructure.
• Working knowledge of Active Directory, including users, computers, groups, Group Policy and trusts.
• Understanding of broader Identity and Access Management concepts such as authentication, access certification and PKI.
• Experience developing automation with scripting tools such as PowerShell, Python or comparable languages.
• Familiarity with SIEM technologies and querying security data.
• Understanding of web traffic and troubleshooting authentication flows.
• Experience contributing to technical projects in an Agile environment.
• Ability to create clear technical documentation and communicate effectively with technical and nontechnical stakeholders.

Responsibilities

• Engineer, implement and support security technologies focused on Privileged Access Management.
• Implement and integrate PAM solutions, with focus on CyberArk Cloud, and support endpoint privilege capabilities (BeyondTrust or CyberArk EPM).
• Onboard applications, accounts and credentials into PAM platforms while maintaining access controls and policies.
• Maintain and enhance CyberArk policies and support endpoint privilege policies for workstation environments.
• Contribute to architectural design of access controls, entitlements and credentials.
• Partner with architecture and engineering teams to advance IAM strategy and roadmap.
• Develop automation using PowerShell or Python to improve privileged-access processes.
• Configure and support API or programmatic access to managed credentials.
• Troubleshoot PAM, authentication and access issues; identify root causes and implement solutions.
• Utilize SIEM data to support troubleshooting, monitoring and decision-making.
• Keep technical documentation current as platforms evolve.
• Contribute to new PAM capabilities and product features in an Agile environment.
• Communicate technical concepts clearly to both technical and nontechnical stakeholders.

Skills

Privileged Access

CyberArk Cloud

BeyondTrust EPM

PowerShell

Python

Windows

Linux

Active Directory

SIEM

Agile

Documentation

ID/Access Management

Education

Bachelor's degree

Tools

CyberArk

BeyondTrust

Job description

Aon plc is seeking a Privileged Access Management Engineer to strengthen and evolve our identity and privileged-access security capabilities. You will engineer, implement and support PAM solutions with a strong focus on CyberArk Cloud, onboarding applications and maintaining access policies.

You will collaborate with architecture and engineering teams, develop automation with PowerShell or Python, and contribute to an Agile delivery environment to enhance security for critical systems.