TIAA Sr Identity Access Management Engineer - CyberArk in Denver, Colorado
Senior Identity Access Management Engineer
The IAM Engineering team within Security Technologies is responsible for collaborating and partnering with teams within Global Cybersecurity along with various application teams and stakeholders across the organization to design, implement and maintain solutions to manage identities and access for the organization. The IAM Engineering team develops and deploys automated solutions for the organization to meet its audit and regulatory access management requirements. The Sr Info Security Engineer will a part of the activities of a small, expert team to design and maintain technical solutions in a consistent and efficient manner.
Key Responsibilities and Duties
Contribute to design and troubleshooting sessions with Cybersecurity Operations and AppDev teams.
Review business requirement to create of functional design and release documentation.
Develop, implement and maintain security solutions supporting the Identity and Access Management program.
Build and maintain operation and configuration documentation, and diagrams.
Work with Cybersecurity Operations and Risk teams to ensure solutions comply with the organization’s standards and policies.
Work with vendors and technology partners to identify new methods to aide in the development and maintenance of solutions.
Conducting proactive analysis to determine if systems are performing optimally.
3 Years Required; 5 Years Preferred
University (Degree), Preferred
- Physical Requirements: Sedentary Work
- University (Degree)
3 or more years’ experience implementing and performing integrations with CyberArk PAS components (ex. AIM, CCP, PSM, PTA, SSH Key Manager) and/or DAP/Conjur.
Experience designing, managing and troubleshooting Identity & Access Management solutions or IT systems.
Experience in a regulated industry (e.g. Financial Services, Pharmaceuticals, Healthcare, Energy, etc.)
Experience supporting an IAM solution in a cloud or hybrid cloud environment.
Experience applying security principles and practices.
Experience with AWS Secrets Manager
Experience with OpenShift, Kubernetes, and Docker
Experience with Splunk
Experience administering Active Directory, Windows and\or Linux\UNIX systems.
Experience with PowerShell, Java, REST, Python, SQL, and\or any other scripting or programing languages.
Potential Salary: $113,300.00 USD
Actual base salary may vary based upon, but not limited to, relevant experience, time in role, base salary of internal peers, prior performance, business sector, and geographic location. In addition to base salary, the competitive compensation package may include, depending on the role, participation in an incentive program linked to performance (for example, annual discretionary incentive programs, non-annual sales incentive plans, or other non-annual incentive plans).
TIAA is the leading provider of financial services in the academic, research, medical, cultural and government fields. We offer a wide range of financial solutions, including investing, banking, advice and education, and retirement services.
TIAA requires all U.S. employees to be fully vaccinated against COVID-19 and provide documentation of full vaccination, unless you qualify for an accommodation as determined by TIAA consistent with applicable law.
Benefits and Total Rewards
The organization is committed to making financial well-being possible for its clients, and is equally committed to the well-being of our associates. That’s why we offer a comprehensive Total Rewards package designed to make a positive difference in the lives of our associates and their loved ones. Our benefits include a superior retirement program and highly competitive health, wellness and work life offerings that can help you achieve and maintain your best possible physical, emotional and financial well-being. To learn more about your benefits, please review our Benefits Summary (https://www.tiaa.org/public/pdf/benefits-at-a-glance.pdf) .
We are an Equal Opportunity/Affirmative Action Employer. We consider all qualified applicants for employment regardless of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other protected status.
Read more about the Equal Opportunity Law here (https://www.dol.gov/general/topics/posters) .
TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.
If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:
Phone: (800) 842-2755
For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here (https://www.tiaa.org/public/tiaa-nuveen-privacy) .
For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here (https://www.tiaa.org/public/tiaa-nuveen-ca-privacy) .
For Applicants of Nuveen residing in Europe and APAC, please click here (https://www.tiaa.org/public/nuveen-eu-uk-privacy) .
For Applicants of Greenwood residing in Brazil (English), click here (https://www.tiaa.org/public/support/privacy/applicants-greenwood-privacy) .
For Applicants of Greenwood residing in Brazil (Portuguese), click here (https://www.tiaa.org/public/support/privacy/applicants-greenwood-portuguese-privacy) .
For Applicants of Westchester residing in Brazil (English), click here (https://www.tiaa.org/public/support/privacy/applicants-westchester-privacy) .
For Applicants of Westchester residing in Brazil (Portuguese), click here (https://www.tiaa.org/public/support/privacy/applicants-westchester-portuguese-privacy) .