Privileged Access Management Engineer

Location: City Of London

Who we are American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals.

AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

About the role

The Privileged Access Management team is situated within the AIG Global Identity and Access Management team. The team is currently focused on increasing the adoption of the selected Enterprise Privileged Access management tool, Cyber Ark, to reduce the overall risk landscape  will partner closely with the PAM Principal Engineers and the development teams to implement strong PAM controls, protect credentials and secrets and mature AIG’s posture using the zero-trust framework.

What You Will Do:

The PAM (Privileged Access Management) Engineer role is essential to supporting business requests for securing and managing privileged accounts.

Plays a pivotal role in supporting the principal engineers by integrating applications with the PAM tool and extending capabilities of the PAM service, ensuring the management of Privileged Accounts and Secrets.

Work directly with our users, being the front line of Privileged Access.

Partner with engineering and architecture teams to scope requirements and capabilities for PAM that are out of the box. Installing and implementing marketplace plug-ins as needed to support adoption.

Support the Principal Engineers to identify opportunities to enhance the PAM capabilities and contribute to process improvements.

Provide training to end-users, Admins and Dev Ops, on Cyber Ark functionality and capabilities.

Leverage knowledge of Privileged Access to maintain a clean and compliant environment.

Implement robust monitoring and alerting for the PAM tool and privileged access.

Help to define, identify, and inventory privileged access within our environment and detect exceptions to our standards through automated reporting solutions.

Make risk-based and data-driven decisions to achieve prioritized outcomes in alignment with PAM standard.

What You Will Need:

Qualifications Detail-oriented and self-motivated.

Customer-focused with strong communication skills, having the ability to communicate technical concepts to a non-technical audience.

Bachelor's degree in a Cybersecurity, Information Technology, or related field, such as Computer Science or Information  depth experience as a Privileged Access Management (PAM) hands-on practitioner, ideally with experience running an enterprise vault, such as Cyber Ark, with a strong track record of configuring and maintaining the solution.

Cyber Ark Defender Certification Extremely proficient using Cyber Ark AAMProfound understanding of privileged access management concepts, identity and access management, and security best practices

Hands on experience using Service Now and Active Directory Conjur Fundamentals certifications

Experience administering Secrets and Key management solutions such as Hashicorp Vault, AWS Secrets Manager, Keyfactor, and Conjur Knowledge of common IT infrastructure technologies and concepts:

Directories: LDAP, Windows Active Directory, Azure AD, Okta, etc.

Operating Systems:
Windows, Linux, Unix…