Principal Engineer, Privileged Access Management

Principal Engineer, Privileged Access Management Skip to main content#Principal Engineer, Privileged Access Management page is loaded## Principal Engineer, Privileged Access Management Apply locations:
NC-Charlotte:
TX-Dallas:
GA-Atlanta:
VA-Reston:
NJ-Jersey Citytime type:
Full time posted on:
Posted Todayjob requisition :
JR2602355
** Who we are
** American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.  
** Get to know the business
** At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals.

AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.  
** About the role
** The Identity and Access Management (IAM) team at AIG is seeking a highly skilled IAM engineer with expertise in the Idira (Cyber Ark) vaulting solutions and strong system integration skills.  As the IAM Principal Privileged Access Engineer, you will play a critical role in designing, implementing, and maintaining our enterprise IAM infrastructure for Privileged Access Management (PAM) solutions.  
* Own the PAM technical architecture, platform standards, and engineering roadmap — defining how the PAM solution and complementary technologies are deployed, integrated, and evolved across the enterprise.
* Architect integrations between the PAM solution stack and adjacent systems:
Entra  / Active Directory, SIEM/ITDR platforms, cloud IAM (AWS, Azure, GCP), ticketing systems (Service Now), and CI/CD pipelines.
* Evaluate and recommend emerging PAM, ISPM, and NHI tooling to inform investment decisions and platform strategy.
* Collaborate with cross-functional teams to gather IAM requirements and translate them into technical solutions.
* Responsible for the configuration and deployment of vault, safes, platforms, workflows, connectors, automations, and other components to support account lifecycle protection and compliance with regulations.
* Manage integrations from the PAM solution with various systems and applications, including but not limited to Active Directory, servers, databases, mainframes, and other applications.
* Implement and maintain password policies and platforms and corresponding account password management within the PAM solution.
* Collaborate with infrastructure, application, and development teams to ensure smooth integration of IAM solutions via API protocols.
* Conduct integration testing to verify the functionality, performance, and security of IAM solutions.
* Stay current with industry best practices and emerging trends in IAM and contribute to the continuous improvement of IAM processes and technologies.  
** What we’re looking for*
* * 10+ years of in-depth IT experience with designing, developing, and supporting PAM solutions with several years focused on IAM solutions (specifically Idira, Cyber Ark).
* 10+ years of experience deploying and configuring common Idira PAM (Cyber Ark) connectors and plug-ins, including Active Directory (AD), Azure AD, servers, databases, mainframe, and other applications as well as creating custom connectors.
* Familiar with software development life cycles (SDLC) and Agile development methodologies.
* Intellectual curiosity about the evolving NHI, agentic AI, and cloud identity security…