Principal Engineer, Privileged Access Management

AIG Employee Services, Inc.; Charlotte (NC); On-site; USD 156,000 - 196,000; Full time

Job summary

AIG Employee Services, Inc. is seeking an IAM Principal Privileged Access Engineer to design, implement and maintain an enterprise PAM infrastructure.

You will own the PAM architecture and drive integrations with Entra ID/AD, SIEM/ITDR, and cloud IAM across diverse platforms. Responsibilities include vault configuration, connector automation, and ensuring secure account lifecycle protection while aligning with regulatory requirements.

Qualifications

• 10+ years of IT experience designing, developing, and supporting PAM/IAM solutions (Idira/CyberArk).
• 10+ years deploying CyberArk connectors and plug-ins, including AD, Azure AD, servers, databases, mainframe, and other applications.
• Familiar with SDLC and Agile development methodologies.
• Intellectual curiosity about evolving IAM/NHI/cloud identity security landscape with proactive program capability.
• Strong verbal communication, decision making and customer service skills.
• Ability to work in a team, adapt quickly to change and learn new applications.
• Highly organized with quality work and deadline discipline.
• Extreme attention to detail due to audit and regulatory requirements.
• Experience in integration testing and ensuring IAM integrations across systems.

Responsibilities

• Own the PAM technical architecture, platform standards, and engineering roadmap across the enterprise.
• Architect integrations between PAM and Entra ID/AD, SIEM/ITDR, cloud IAM (AWS, Azure, GCP), ServiceNow, and CI/CD pipelines.
• Configure and deploy vaults, safes, platforms, workflows, connectors, automations to support account lifecycle protection.
• Manage integrations from PAM with Active Directory, servers, databases, mainframes, and applications.
• Implement and maintain password policies within the PAM solution and collaborate with teams for API-based IAM integrations.
• Perform integration testing to verify IAM functionality, performance and security.
• Stay current with IAM industry best practices and contribute to process improvements.

Skills

Idira PAM

PAM solutions

Active Directory

Azure AD

SIEM

ITDR

Cloud IAM

API integration

CI/CD

Communication

Team collaboration

Education

Bachelor's degree in Cybersecurity/IT or related field

Tools

CyberArk connectors

Active Directory connectors

Azure AD connectors

ServiceNow

CI/CD pipelines

Job description

Who we are

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks. We're also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company's systems from security risks, while designing technology strategies that enable AIG's businesses to achieve their goals. AIG's Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

About the role

The Identity and Access Management (IAM) team at AIG is seeking a highly skilled IAM engineer with expertise in the Idira (CyberArk) vaulting solutions and strong system integration skills. As the IAM Principal Privileged Access Engineer, you will play a critical role in designing, implementing, and maintaining our enterprise IAM infrastructure for Privileged Access Management (PAM) solutions. Own the PAM technical architecture, platform standards, and engineering roadmap - defining how the PAM solution and complementary technologies are deployed, integrated, and evolved across the enterprise. Architect integrations between the PAM solution stack and adjacent systems: Entra ID / Active Directory, SIEM/ITDR platforms, cloud IAM (AWS, Azure, GCP), ticketing systems (ServiceNow), and CI/CD pipelines. Evaluate and recommend emerging PAM, ISPM, and NHI tooling to inform investment decisions and platform strategy. Collaborate with cross-functional teams to gather IAM requirements and translate them into technical solutions. Responsible for the configuration and deployment of vault, safes, platforms, workflows, connectors, automations, and other components to support account lifecycle protection and compliance with regulations.Manage integrations from the PAM solution with various systems and applications, including but not limited to Active Directory, servers, databases, mainframes, and other applications. Implement and maintain password policies and platforms and corresponding account password management within the PAM solution. Collaborate with infrastructure, application, and development teams to ensure smooth integration of IAM solutions via API protocols. Conduct integration testing to verify the functionality, performance, and security of IAM solutions. Stay current with industry best practices and emerging trends in IAM and contribute to the continuous improvement of IAM processes and technologies.

What we're looking for

• 10+ years of in-depth IT experience with designing, developing, and supporting PAM solutions with several years focused on IAM solutions (specifically Idira, CyberArk).
• 10+ years of experience deploying and configuring common Idira PAM (CyberArk) connectors and plug-ins, including Active Directory (AD), Azure AD, servers, databases, mainframe, and other applications as well as creating custom connectors.
• Familiar with software development lifecycles (SDLC) and Agile development methodologies.
• Intellectual curiosity about the evolving NHI, agentic AI, and cloud identity security landscape - and a bias toward building program capability ahead of the threat.
• Candidates must possess excellent verbal communication, decision making and customer service skills.
• Ability to work in a team environment, adapt quickly to change and learn new applications or environments is required.
• Must be highly organized and maintain quality work while meeting deadlines.
• Extreme attention to detail is necessary due to audit and regulatory requirements.
• Proven experience in integration testing, ensuring the seamless integration of IAM solutions with various systems and applications.
• Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues.
• Excellent communication skills and the ability to collaborate effectively with cross-functional teams.
• Proactive and self-motivated with the ability to work independently and manage multiple tasks simultaneously.
• Valid Guardian certification in Idira (CyberArk) preferred Bachelor's degree in a Cybersecurity, Information Technology, or related field, such as Computer Science or Information Technology.

For positions based in Jersey City, NJ, the base salary range for this position is $156,000-$196,000 and the position is eligible for a bonus in accordance with the terms of the applicable incentive plan. Your actual compensation will be dependent on your skills, experience, and qualifications.

We're proud to offer a range of competitive benefits, a summary of which can be viewed here: US Benefits Overview.

#LI-CN1 #Cybersecurity #Infosec

At AIG, we value in-person collaboration as a vital part of our culture, which is why we ask our team members to be primarily in the office.

Enjoy benefits that take care of what matters At AIG, our people are our greatest asset. We know how important it is to protect and invest in what's most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security - as well as your professional development to bring peace of mind to you and your family.

Reimagining insurance to make a bigger difference to the world. American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world's most far-reaching property casualty networks. It is an exciting time to join us - across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become.

Welcome to a culture of inclusion. We're committed to creating a culture that truly respects and celebrates each other's talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The talent of our people is one of AIG's greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations.

AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories.

AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities. If you believe you need a reasonable accommodation, please send an email to [e-mail].

Functional Area: IT - Information Technology AIG Employee Services, Inc. As a global risk leader with deep industry expertise and innovative solutions to smartly manage risk, AIG enables our clients' growth in ways they never thought possible. We also do the same for our colleagues, because we know our people are our greatest strength - the source of every insight, every idea and every innovation.

When we're working as one team to do what's right for our colleagues and our communities, we can achieve excellence together.

Additional information about AIG can be found at www.aig.com | YouTube | Instagram| LinkedIn.