PAM Engineering Lead - CyberArk IAM Platform

WTW; Minneapolis (MN); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401(k) plan with company contribution

Paid time off

Job summary

Willis Towers Watson IT seeks a senior PAM Engineering Lead to drive CyberArk (Idira) PAM solutions, own the platform backlog, and mentor the IAM team. The role focuses on building, operating, and improving the privileged access platform while aligning with business risk and regulatory priorities.

The candidate will manage automation of credential rotation, integrate with AD/Entra ID, Windows, Unix/Linux, databases, and networks, and collaborate with senior stakeholders to deliver secure access

Qualifications

• 5+ years in IAM/PAM SaaS engineering, incl. 3+ years with CyberArk (Idira) Privileged Access Manager.
• Experience leading PAM engineering teams and setting technical direction.
• Experience integrating CyberArk with Active Directory/Entra ID, Windows, Unix/Linux, databases, and network devices.
• Scripting proficiency with CyberArk REST API, PACLI, PowerShell and Python.
• Strong stakeholder communication and backlog management.

Responsibilities

• Lead design, build and maintenance of CyberArk Privileged Access Manager solutions.
• Own PAM platform backlog and roadmap in collaboration with stakeholders.
• Oversee onboarding, credential rotation automation and platform health.
• Define privileged access policies and just-in-time access models.
• Communicate status to leadership and mentor IAM team members.

Skills

PAM engineering

Backlog ownership

Stakeholder communication

Mentoring engineers

Tools

CyberArk Vault

CPM

PVWA

PSM

PACLI

PowerShell

Python

Active Directory/Entra ID

Job description

Willis Towers Watson IT seeks a senior PAM Engineering Lead to drive CyberArk (Idira) PAM solutions, own the platform backlog, and mentor the IAM team. The role focuses on building, operating, and improving the privileged access platform while aligning with business risk and regulatory priorities.

The candidate will manage automation of credential rotation, integrate with AD/Entra ID, Windows, Unix/Linux, databases, and networks, and collaborate with senior stakeholders to deliver secure access