Senior Cybersecurity Engineer CyberArk & Privileged Access

Travelers; Hartford (CT); On-site; USD 127,000 - 209,000; Full time

Benefits offered by this job

Health Insurance

401(k) matching

Paid Time Off

Wellness Program

Volunteer Rewards

Job summary

Travelers is seeking a Cybersecurity Engineer II to oversee the architecture, deployment, and maintenance of self-hosted CyberArk PAM platforms. You will partner with business teams to implement secure, least-privilege access and automate onboarding, reconciliation, and monitoring using CyberArk REST APIs, PowerShell, and scripting in Python.

You will drive vault resilience, upgrades, and integration with IdP/SSO systems, while advancing password-less authentication and secure privileged access

Qualifications

• Bachelor's degree in Computer Science or equivalent.
• 4 years of IT security engineering or software engineering experience.
• Hands-on experience with self-hosted CyberArk PAM in production.

Responsibilities

• Own architecture, deployment, and lifecycle of CyberArk components (PVWA, CPM, PSM).
• Maintain configurations, access policies, and master policy settings.
• Onboard privileged accounts and secrets across Windows, Linux/Unix, databases, and cloud.
• Lead vault resilience, DR, HA, backups, and upgrades with minimal disruption.
• Build automation for onboarding, reconciliation, reporting, and health checks via REST API and PowerShell.
• Troubleshoot PAM issues and document standards and runbooks.
• Advance privileged access roadmap toward password-less auth and ephemerality.

Skills

CyberArk

PAM

Windows

Linux

Cloud

REST API

PowerShell

Education

Bachelor's degree in Computer Science

Tools

PVWA

CPM

PSM/PSMP

CyberArk REST API

PowerShell

Python

Job description

Travelers is seeking a Cybersecurity Engineer II to oversee the architecture, deployment, and maintenance of self-hosted CyberArk PAM platforms. You will partner with business teams to implement secure, least-privilege access and automate onboarding, reconciliation, and monitoring using CyberArk REST APIs, PowerShell, and scripting in Python.

You will drive vault resilience, upgrades, and integration with IdP/SSO systems, while advancing password-less authentication and secure privileged access