Associate Principal, Privileged Access Management (CyberArk)

About the role

Enterprise Technology is a global organization within Transamerica that provides dedicated application support and serves as the technological backbone for Transamerica and all of Aegon's business units. We create the company’s AI environment, build a flexible ‘cloud experience’ for internal hosting services, design frameworks for data governance and management, and ensure the security and stability of the company’s technology. The Privileged Access Management (PAM) organization is responsible for the management and governance of privileged access throughout Aegon.

As a PAM Associate Principal, you will drive the successful delivery and implementation of the Privileged Access Management program. Our global teams are diverse, representing over a dozen nationalities across multiple countries, and include experts in application development, information security, infrastructure services, data & analytics, and more. We value curiosity, problem-solving, and the ability to adapt to new situations and technologies.

Responsibilities

• Design, configure, install, integrate, and maintain PAM Solutions (CyberArk) across enterprise environments.
• Provide solutions to manage human, non-human, vendor, contractor, service, application, and cloud privileged accounts.
• Act as a subject matter expert and advocate for Enterprise Technology and the overall Security platform, advising business partners on privileged account management.
• Collaborate with PAM Engineering to identify improvements and troubleshoot incidents.
• Assist with troubleshooting privileged access-related issues across the enterprise environment.
• Drive cultural change toward a centralized security management program.
• Mentor junior team members and lead large initiatives, including presenting and influencing at senior organizational levels.
• Ensure the PAM program supports regulations and standards such as SOX, NYDFS, NIST, and SOC.
• Create and present executive-level materials, including architectural diagrams, program roadmaps, and business cases.

Requirements

• Bachelor’s degree in computer science or a related field, or equivalent education/experience.
• 10+ years of experience managing privileged access and integrating with platforms such as LDAP, Windows/UNIX, databases, network devices, and applications.
• Expert knowledge of Windows, Linux, and Mainframe systems, including account and access management.
• 3+ years of experience scripting automation tasks.
• Experience creating, managing, and training customers on safes, vaults, session management, key managers, credential providers, platforms, and secrets management.

Preferred Qualifications

• Extensive experience with CyberArk On-Premise Solutions (CCP, CP, Alero, Secrets Hub, PSM, Conjur).
• CyberArk Certification (Sentry/Guardian).
• Knowledge of IAM, network architecture, and security concepts.
• Experience working in an Agile Scrum framework or DevSecOps.
• Certified Information Systems Security Professional (CISSP).
• 12+ years of experience in IT/Security.

Behavioral & Leadership Competencies

• Commitment
• Interpersonal Skills
• Learning Aptitude
• Critical Thinking
• Resourcefulness
• Tolerance of Ambiguity

Working Conditions

• This is a remote or hybrid position.
• May require some international travel.
• May require non-standard work hours due to global support and a globally dispersed team.

Pay

The salary for this position generally ranges between $122,000 and $162,000 annually. The actual starting pay is determined by factors including qualifications, experience, geography, work location (in-office, hybrid, remote), and operational needs. Salary may vary above or below the stated range as permitted by applicable law. This position is typically eligible for an annual bonus based on company and individual performance, at the company’s discretion.

Applicants must be authorized to work for any employer in the U.S. Sponsorship for an employment visa is not available at this time.