PAM Engineering Lead
Willis Towers Watson16 hours ago
Minneapolis, MN, USAStaff+
Base Salary
$130k - $170k/yr
Responsibilities
- Lead the design, build, maintenance, operation, and continuous improvement of CyberArk Idira PAM solutions across WTW.
- Own and prioritize the PAM platform backlog and roadmap, set technical direction, and act as product owner.
- Oversee CyberArk connectors and platforms, including Vault, CPM, PSM, and PVWA, across Windows, Unix/Linux, databases, and network devices.
- Develop and review custom platforms, connection components, and automation scripts using the CyberArk REST API, PACLI, PowerShell, and Python.
- Govern privileged access policies, least-privilege and just-in-time access models, session recording and review, Safe membership reviews, and account discovery.
- Oversee privileged account onboarding, offboarding, updates, credential rotation, SSH key rotation, and lifecycle management.
- Ensure platform health, audit trail integrity, credential rotation, and session recording reliability.
- Lead sprint planning, backlog grooming, roadmap reviews, status communications, and response to escalated issues and support tickets.
- Own responses to audit findings and drive remediation to completion while ensuring compliance with internal policies and external regulations.
- Mentor IAM engineers, develop team capabilities, improve processes and documentation, and influence senior stakeholders.
Requirements
- At least 5 years of IAM/PAM SaaS engineering experience, including at least 3 years of hands-on CyberArk Idira PAM experience.
- Demonstrated experience leading PAM engineering teams and acting as a senior technical authority.
- Strong knowledge of privileged account lifecycle management, credential and SSH key rotation, session isolation and monitoring, least privilege, and just-in-time access.
- Experience integrating CyberArk with Active Directory/Entra ID, Windows, Unix/Linux, databases, network devices, and SaaS applications.
- Proficiency with the CyberArk REST API, PACLI, PowerShell, and Python for automation and integration.
- Working knowledge of SAML, OAuth2/OIDC, and secrets management such as Conjur or AAM.
- Experience with access governance frameworks and compliance mapping, including ISO 27001, SOC 2, GDPR, or similar.
- Experience writing user stories, managing a backlog, or working closely with product and agile teams.
- Strong stakeholder communication, analytical, problem-solving, project management, verbal, and written communication skills.
- CyberArk Defender or Sentry PAM certification is preferred.
- Experience with BeyondTrust, Delinea/Thycotic, or HashiCorp Vault is preferred.
- Familiarity with Agile/Scrum ceremonies and Jira or Azure DevOps is preferred.
- Exposure to Zero Trust principles and NIST SP 800-53 AC/IA control families is preferred.
Benefits
- Base salary range is $130,000.00-$170,000.00 USD annually, plus eligibility for an annual short-term incentive bonus.
- Health and welfare benefits include medical, prescription drug, fertility, dental, vision, Health Savings Account, commuter, flexible spending, life insurance, AD&D, accident, critical illness, legal, identity theft protection, wellbeing, adoption, surrogacy, auto/home, and pet insurance benefits.
- Leave benefits include paid holidays, annual paid time off, applicable state/local paid leave, short- and long-term disability, bereavement, FMLA, ADA, jury duty, military, parental, and adoption leave; Washington roles also include Paid Time Off.
- Retirement benefits include a qualified contributory pension plan, 401(k) plan with annual nonelective company contribution, and eligible non-qualified retirement plans.
- Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.
About Willis Towers Watson
WTW is a global advisory, broking, and software firm serving employers, insurers, and institutional clients across people, risk, and capital. It provides insurance brokerage and risk advisory, employee benefits and pensions consulting, and HR/benefits administration software and analytics. Headquartered in London and listed on NASDAQ (WTW), the company was formed in 2016 via the Willis Group–Towers Watson merger and operates in roughly 140 markets worldwide.