Privileged Access Management Engineer (PAM) - CyberArk Cloud

Aon; Illinois; On-site; USD 92,000 - 130,000; Full time

Job summary

Aon is seeking a Privileged Access Management (PAM) Engineer to strengthen identity and privileged-access security, with a strong focus on CyberArk Cloud. You will onboard applications, maintain access policies, automate processes and deliver secure, scalable PAM solutions across environments.

Responsibilities include implementing PAM technologies, supporting Windows/Linux, and collaborating with architecture and engineering teams to advance IAM strategy in an Agile setting.

Qualifications

• 3+ years of relevant experience in privileged access or identity security.
• Hands-on CyberArk experience, with CyberArk Cloud preferred.
• Experience with PAM operational activities: credential onboarding, access administration, policy configuration, API-based credential access.
• Experience with endpoint privilege management technologies such as BeyondTrust EPM or CyberArk EPM.
• Hands-on experience supporting Windows and/or Linux infrastructure.
• Working knowledge of Active Directory (users, computers, groups, GPOs, trusts).
• Understanding Identity and Access Management concepts including authentication, access certification, PKI.
• Experience developing automation with scripting tools such as PowerShell, Python or similar.
• Familiarity with SIEM technologies and security data queries.
• Understanding of web traffic and troubleshooting authentication flows; experience in Agile projects.
• Ability to create clear technical documentation and communicate with stakeholders.

Responsibilities

• Engineer, implement and support PAM technologies with emphasis on CyberArk Cloud.
• Onboard applications, accounts and credentials into PAM while enforcing access controls.
• Maintain CyberArk policies and endpoint privilege policies across workstation environments.
• Contribute to architecture of access controls, entitlements and credentials.
• Collaborate with Architecture and Engineering to evolve Identity and Access Management strategy.
• Develop automation to improve privileged-access processes using PowerShell or Python.
• Configure API-based credential access and support programmatic access to credentials.
• Troubleshoot PAM, authentication and access issues; identify root causes and implement fixes.
• Utilize SIEM data for monitoring and decision-making; keep documentation current.
• Contribute to new PAM capabilities within Agile delivery; communicate technical concepts clearly.
• Communicate effectively with technical and nontechnical stakeholders.

Skills

Privileged Access

CyberArk Cloud

PowerShell

Python

Windows

Linux

Active Directory

SIEM

Automation

Agile

Documentation

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or related field

Tools

CyberArk

BeyondTrust EPM

PowerShell

Python

Job description

Aon is seeking a Privileged Access Management (PAM) Engineer to strengthen identity and privileged-access security, with a strong focus on CyberArk Cloud. You will onboard applications, maintain access policies, automate processes and deliver secure, scalable PAM solutions across environments.

Responsibilities include implementing PAM technologies, supporting Windows/Linux, and collaborating with architecture and engineering teams to advance IAM strategy in an Agile setting.