Associate Principal, Privileged Access Management (CyberArk)

Job Overview Enterprise Technology is a global organization within Transamerica. We provide dedicated application support to Transamerica, and we bring all of Aegon’s business units together through the use of technology. We provide the backbone – the infrastructure – for how everything works. We’re creating the company’s AI environment, building a flexible ‘cloud experience’ for internal hosting services, designing frameworks for data governance and management, and ensuring the security and stability of the company’s technology. In short, we enable the business units to move more quickly and deliver to our clients in the best possible way. What You Will Do Design, configure, install, integrate, and maintain our PAM solutions (CyberArk) across the enterprise environments. Provide solutions to effectively manage human, non‑human, vendor, contractor, service, application, and cloud privileged accounts. Provide subject matter expertise to our business partners on how to manage privileged accounts while acting as an advocate for Enterprise Technology (ET) and our overall Security platform. Work closely with PAM Engineering to identify improvements and troubleshoot incidents as they arise. Assist with troubleshooting privileged access related issues across the enterprise environment. Assist with shifting cultural change toward a centralized security management program. Mentor junior members of the team. Lead large initiatives in driving the PAM environment changes, including presenting and influencing at the senior levels in the organization. Ensure the PAM program will have the required characteristics to support various regulations and standards such as SOX, NYDFS, NIST, and SOC. Create and present various material related to the PAM program at the executive level (e.g., architectural diagrams, program roadmaps, business cases). Qualifications Bachelor’s degree in computer science or related degree, or equivalent education/experience. 10+ years of experience managing privileged access and integrating with platforms such as LDAP, Windows/UNIX, databases, network devices, and applications. Expert knowledge of Windows, Linux, and Mainframe systems, and how accounts and access are managed across the environments. 3+ years of experience scripting automation tasks. Experience creating, managing, and training customers about safes, vaults, session management, key managers, credential providers, platforms, and secrets management. Behavioral and leadership competencies: Commitment, Interpersonal Skills, Learning Aptitude, Critical Thinking, Resourcefulness, Tolerance of Ambiguity. Preferred: Extensive experience with CyberArk On‑Premise solutions (CCP, CP, Alero, Secrets Hub, PSM, Conjur) and certification (Sentry/Guardian) on the CyberArk platform. Knowledge of IAM, network architecture, and security concepts. Experience working in an Agile Scrum framework and in DevSecOps. Certified Information Systems Security Professional (CISSP). 12+ years of experience in IT/Security. Working Conditions This is a hybrid position requiring three days in office per week in one of our core locations (Cedar Rapids, Denver). May require some international travel ( Compensation Salary ranges between $122,000 and $162,000 annually. This range is a good faith estimate and actual starting pay is determined by qualifications, experience, geography, work location designation (in‑office, hybrid, remote) and operational needs. The position is typically eligible for an annual bonus based on company and individual performance. Benefits Competitive Pay Bonus for Eligible Employees Benefits Package Pension Plan 401k Match Employee Stock Purchase Plan Tuition Reimbursement Disability Insurance Medical Insurance Dental Insurance Vision Insurance Employee Discounts Career Training & Development Opportunities Health and Work/Life Balance Benefits Paid Time Off starting at 160 hours annually for employees in their first year of service Ten paid holidays per year Wellness Coaching and Reward Dollars through the holistic wellness program Parental Leave – fifteen days per calendar year for eligible employees Adoption Assistance Employee Assistance Program Back‑Up Care Program PTO for Volunteer Hours Employee Matching Gifts Program Employee Resource Groups Inclusion & Diversity Programs Employee Recognition Program Referral Bonus Programs Equal Employment Opportunity We are committed to inclusion and diversity. We encourage the unique perspectives of employees and are dedicated to creating a respectful and inclusive work environment. Employment Details Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time. Relocation assistance will not be provided for this position. #J-18808-Ljbffr