Senior Cybersecurity Technologist

Travelers; Atlanta (GA); On-site; USD 127,000 - 209,000; Full time

Job summary

Travelers is seeking a Cybersecurity Engineering professional to own the architecture and lifecycle of self-hosted CyberArk components (PVWA, CPM, PSM/PSMP). You will manage configurations, access policies, and least-privilege controls across Windows, Linux, databases, and cloud platforms.

You will drive vault resilience, disaster recovery, upgrades, and automation via CyberArk REST API and PowerShell, with a focus on ephemerality and secure credential practices.

Qualifications

• Bachelor's degree in Computer Science or similar field.
• Hands-on experience operating self-hosted CyberArk PAM in production.
• Experience developing custom CPM plugins for non-standard platforms.
• Proficiency with CyberArk REST API and PowerShell scripting.

Responsibilities

• Own the architecture, deployment, and lifecycle of CyberArk components (PVWA, CPM, PSM/PSMP).
• Maintain platform configurations, access policies, and least-privilege controls.
• Onboard privileged accounts across Windows, Linux/Unix, databases, network devices, and cloud platforms.
• Lead vault resilience, DR, high-availability, backups, and version upgrades.

Skills

CyberArk PAM

PAM architecture

PowerShell scripting

Windows Server

AD/LDAP/SAML

Just-in-time access

Education

Bachelor's degree in CS

Tools

PVWA

CPM

PSM/PSMP

CyberArk REST API

Job description

Who Are We?

Taking care of our customers, our communities and each other. That's the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 170 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Job Category

Technology

Compensation Overview

The annual base salary range provided for this position is a nationwide market range and represents a broad range of salaries for this role across the country. The actual salary for this position will be determined by a number of factors, including the scope, complexity and location of the role; the skills, education, training, credentials and experience of the candidate; and other conditions of employment. As part of our comprehensive compensation and benefits program, employees are also eligible for performance-based cash incentive awards.

Salary Range

$126,500.00 - $208,700.00

Target Openings

1

What Is the Opportunity?

At Travelers, our Cybersecurity Engineering teams are responsible for the overall implementation and management of strategic platforms that provide oversight, process management, protection and enablement of security control processes and allow for an effective Cybersecurity practice.

What Will You Do?

• Own the architecture, deployment, and lifecycle of self-hosted CyberArk components, including the Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM/PSMP).
• Maintain platform configurations, safe structures, access policies, and master policy settings that align with least-privilege and separation-of-duties principles.
• Onboard privileged accounts and secrets across Windows, Linux/Unix, databases, network devices, and cloud platforms, developing custom CPM plugins and connectors where out-of-the-box support falls short.
• Lead vault resilience efforts, including disaster recovery, high-availability configuration, backup validation, and version upgrades with minimal disruption.
• Build automation for onboarding, reconciliation, reporting, and health monitoring using the CyberArk REST API, PowerShell, and related tooling.
• Troubleshoot complex issues across the PAM stack, from connection component failures and PSM recordings to CPM rotation errors and vault performance tuning.
• Document standards and runbooks and contribute to the technical maturity of the broader team.
• Help advance our privileged access roadmap toward password-less and modern authentication by reducing reliance on static credentials through ephemer

What Will Our Ideal Candidate Have?

• Hands-on experience operating self-hosted (on-premises) CyberArk PAM in a production enterprise environment.
• Strong working knowledge of the full CyberArk component set: Vault, PVWA, CPM, PSM/PSMP, and familiarity with PTA, Conjur, or CyberArk's SaaS offerings.
• Experience developing custom connection components and CPM plugins for non-standard platforms.
• Proficiency with the CyberArk REST API and scripting in PowerShell (Python a plus) to automate operational tasks.
• Solid command of Windows Server and Active Directory, with working knowledge of Linux/Unix privileged access models.
• Practical understanding of authentication protocols and PKI concepts (LDAP, SAML, Kerberos, certificates) as they relate to PAM.
• Understanding of just-in-time and zero-standing-privilege access models, and how to move a program from static, always-on credentials toward ephemeral access.
• Working knowledge of password-less and certificate-based authentication concepts, and how they apply to privileged access.
• Experience integrating PAM with the surrounding identity and operations ecosystem IdP/SSO (Entra ID, Okta), ITSM (ServiceNow), SIEM, and secrets consumers via API.
• Experience evaluating, piloting, or integrating new capabilities into an existing PAM program - able to weigh build-vs-buy tradeoffs and plan phased rollouts.
• A track record of leading upgrades, migrations, or resilience improvements in a self-hosted deployment.
• CyberArk certifications (Defender, Sentry, or Guardian).
• Exposure to hybrid and cloud privileged access patterns (AWS, Azure).
• Experience supporting privileged access in a regulated industry.

What is a Must Have?

Bachelor's degree in Computer Science, similar degree, or its eq