Senior Cybersecurity Technologist

Compensation

Annual base salary range: $ - $ (national market range). Additional performance-based incentive awards available.

• Own architecture, deployment, and lifecycle of self-hosted Cyber Ark components: PVWA, CPM, PSM/PSMP.
• Maintain platform configurations, safe structures, access policies, and master policy settings aligned with least-privilege and separation-of-duties principles.
• Onboard privileged accounts and secrets across Windows, Linux/Unix, databases, network devices, and cloud platforms; develop custom CPM plugins and connectors where needed.
• Lead vault resilience efforts, including disaster recovery, high-availability configuration, backup validation, and version upgrades with minimal disruption.
• Build automation for onboarding, reconciliation, reporting, and health monitoring using the Cyber Ark REST API, Power Shell, and related tooling.
• Troubleshoot complex issues across the PAM stack, including connection component failures, PSM recordings, CPM rotation errors, and vault performance tuning.
• Document standards and runbooks, contributing to the technical maturity of the broader team.
• Advance the privileged access roadmap toward password-less and modern authentication by reducing reliance on static credentials through ephemerally‑created access models, and tighter integration with the identity platform.

• Hands‑on experience operating self‑hosted (on‑premises) Cyber Ark PAM in a production enterprise environment.
• Strong working knowledge of the full Cyber Ark component set:
  Vault, PVWA, CPM, PSM/PSMP; familiarity with PTA, Conjur, or Cyber Ark's SaaS offerings.
• Experience developing custom connection components and CPM plugins for non‑standard platforms.
• Proficiency with the Cyber Ark REST API and scripting in Power Shell (Python a plus) to automate operational tasks.
• Solid command of Windows Server and Active Directory; working knowledge of Linux/Unix privileged access models.
• Practical understanding of authentication protocols and PKI concepts (LDAP, SAML, Kerberos, certificates) as they relate to PAM.
• Understanding of just‑in‑time and zero‑standing‑privilege access models and ability to shift from static credentials to ephemerally‑created access.
• Experience integrating PAM with surrounding identity and operations ecosystems (IdP/SSO such as Entra , Okta; ITSM such as Service Now; SIEM; secrets consumers via API).
• Experience evaluating, piloting, or integrating new capabilities into an existing PAM program and weighing build‑vs‑buy tradeoffs.
• Track record of leading upgrades, migrations, or resilience improvements in a self‑hosted deployment.
• Cyber Ark certifications (Defender, Sentry, or Guardian). Exposure to hybrid and cloud privileged access patterns (AWS, Azure). Experience supporting privileged access in a regulated industry.

• Bachelor’s degree in Computer Science, information technology, or equivalent work experience.
• At least four years of experience in information technology security engineering or software engineering.

• Health insurance coverage for employees and eligible family members from day one.
• Travelers matches 401(k) contributions dollar‑for‑dollar up to the first 5% of eligible pay, and offers a Paying it Forward Savings Program for student loan repayment.
• Fully funded Pension Plan.
• Minimum 20 days paid time off annually plus nine paid company holidays.
• Wellness program including mental health counseling, health coaching, and access to tools and resources.
• Volunteer rewards and matching gift program encouraging community involvement.

Travelers is an equal opportunity employer. In accordance with local law, candidates seeking employment in Colorado are not required to disclose dates of attendance at or graduation from educational institutions.

Travelers reserves the right to fill this position at a level above or below the level included in this posting.

For additional information about benefits, visit