Information Security Engineer – III

Capital Group

. Secure and modernize Capital Group’s Privileged Access Management (PAM) capabilities within the Identity and Access Management (IAM) organization .

Posted 10/1/2026full-timeUnited StatesSeniorLead💰 $121,554 - $226,637 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Privileged Access Management (PAM) and Identity and Access Management (IAM), with a strong focus on security best practices, cloud and on-premises solutions, and operational resiliency. Proficient in engineering and modernizing PAM capabilities while ensuring compliance and effective risk management.

Highest-signal resume keywords

Privileged Access Management (PAM)Identity and Access Management (IAM)CyberArkStrongDMAWS

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privileged Access ControlsAuthenticationAuthorizationMonitoringIncident ResponseRoot-Cause AnalysisVulnerability RemediationPolicy-Driven AuthorizationJust-In-Time ProvisioningServiceNow Integration

Soft Skills

Problem SolvingCollaboration

Tools & Technologies

AzureKubernetes/EKSActive DirectorySSOSAMLOIDCOAuth 2.0SCIM 2.0PowerShellTerraform

Certifications & Qualifications

CISSPCyberArk CertificationMicrosoft CertificationAWS Certification

Industry Keywords

Security Best PracticesOperational ResiliencyEnterprise Identity ServicesAccess ManagementCloud Security

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudKubernetesLinuxPythonServiceNowTerraform

About the role

Key responsibilities & impact

Secure and modernize Capital Group’s Privileged Access Management (PAM) capabilities within the Identity and Access Management (IAM) organization
Design, implement, and support solutions protecting privileged access across on-premises and cloud environments
Advance Capital Group’s security modernization strategy
Contribute to PAM platform modernization, StrongDM adoption, Privileged Access Workstation (PAW) enhancements, ServiceNow integration, and Azure support
Improve operational resiliency, reduce risk, and strengthen security of critical enterprise systems
Solve complex security challenges in a direct engineering environment
Partner with cross-functional teams
Deliver scalable solutions balancing security, efficiency, and user experience

Requirements

What you’ll need

10+ years of experience in Information Security, Identity and Access Management (IAM), Privileged Access Management (PAM), or a related field
Firsthand experience with PAM technologies such as CyberArk and StrongDM
Strong understanding of privileged access controls, identity management, authentication, authorization, and security best practices
Experience engineering privileged access across on-premises and cloud environments
Experience with AWS, Azure, Kubernetes/EKS, Windows and Linux hosts, databases, command-line access, policy-driven authorization, and monitored sessions
Experience with Active Directory and enterprise identity services
Experience with SSO, SAML, OIDC, OAuth 2.0, SCIM 2.0, RBAC, ABAC, certificate-based authentication, Kerberos, and just-in-time provisioning
Ability to troubleshoot complex access and authentication issues and provide Tier 3 support
Experience with monitoring, incident response, root-cause analysis, vulnerability remediation, and resilient production operations
Ability to define and operationalize PAM standards, architecture patterns, controls, exception processes, lifecycle governance, metrics, and audit-ready reporting
Preferred: experience securing non-human and machine identities, including service accounts, workload identities, certificates, secrets, and AI agents
Preferred: experience designing ServiceNow-integrated just-in-time or on-demand privileged-access workflows
Preferred: experience automating PAM administration using PowerShell, Python, Terraform, Ansible, or comparable infrastructure-as-code tooling
Preferred: experience modernizing legacy PAM infrastructure and designing resilient cloud or colocation architectures
Preferred: relevant security certifications such as CISSP, CyberArk, Microsoft, or AWS certifications

Benefits

Comp & perks

Competitive salary
Individual annual performance bonus
Capital’s annual profitability bonus
Retirement plan where Capital contributes 15% of eligible earnings
Generous time-away and health benefits from day one
Flexible work options
2-for-1 matching gifts for charitable contributions
Opportunity to secure annual grants for charitable organizations
On-demand professional development resources
Capital-funded retirement contribution