Principal Privilege Access Management Engineer

Role Overview

The Identity and Access Management (IAM) team at AIG is seeking a highly skilled IAM engineer with expertise in the Idira (Cyber Ark) vaulting solutions and strong system integration skills. As the IAM Principal Privileged Access Engineer, you will play a critical role in designing, implementing, and maintaining our enterprise IAM infrastructure for Privileged Access Management (PAM) solutions.

• Own the PAM technical architecture, platform standards, and engineering roadmap — defining how the PAM solution and complementary technologies are deployed, integrated, and evolved across the enterprise.
• Architect integrations between the PAM solution stack and adjacent systems:
  Entra  / Active Directory, SIEM/ITDR platforms, cloud IAM (AWS, Azure, GCP), ticketing systems (Service Now), and CI/CD pipelines.
• Evaluate and recommend emerging PAM, ISPM, and NHI tooling to inform investment decisions and platform strategy.
• Collaborate with cross‑functional teams to gather IAM requirements and translate them into technical solutions.
• Configure and deploy vaults, safes, platforms, workflows, connectors, automations, and other components to support account lifecycle protection and compliance with regulations.
• Manage integrations from the PAM solution with various systems and applications, including but not limited to Active Directory, servers, databases, mainframes, and other applications.
• Implement and maintain password policies, platforms, and corresponding account password management within the PAM solution.
• Collaborate with infrastructure, application, and development teams to ensure smooth integration of IAM solutions via API protocols.
• Conduct integration testing to verify the functionality, performance, and security of IAM solutions.
• Stay current with industry best practices and emerging trends in IAM and contribute to the continuous improvement of IAM processes and technologies.

• 10+ years of in‑depth IT experience designing, developing, and supporting PAM solutions with several years focused on IAM solutions (specifically Idira, Cyber Ark).
• 10+ years of experience deploying and configuring common Idira PAM (Cyber Ark) connectors and plug‑ins, including Active Directory, Azure AD, servers, databases, mainframe, and other applications, as well as creating custom connectors.
• Familiarity with software development life cycles (SDLC) and Agile development methodologies.
• Intellectual curiosity about the evolving NHI, agentic AI, and cloud identity security landscape — and a bias toward building program capability ahead of the threat.
• Excellent verbal communication, decision‑making, and customer‑service skills.
• Ability to work in a team environment, adapt quickly to change, and learn new applications or environments.
• Highly organized with the ability to maintain quality work while meeting deadlines.
• Extreme attention to detail necessary due to audit and regulatory requirements.
• Proven experience in integration testing, ensuring seamless integration of IAM solutions with various systems and applications.
• Strong analytical and problem‑solving skills with the ability to troubleshoot complex technical issues.
• Excellent collaboration skills with cross‑functional teams.
• Proactive, self‑motivated with the ability to work independently and manage multiple tasks simultaneously.
• Valid Guardian certification in Idira (Cyber Ark) preferred.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field.

Base salary range for positions based in Jersey City, NJ: $156,000 – $196,000
. The position is eligible for a bonus in accordance with the applicable incentive plan. A competitive benefits package is available, including health, wellness, financial security, and professional development.

AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories. AIG is committed to providing reasonable accommodations to applicants and employees with disabilities. If you believe you need a reasonable accommodation, please email