Principal Identity Cloud Security Engineer

At AIG, we are reimagining the way we help customers to manage risk. Join us as a Principal Identity Cloud Security Engineer to play your part in that transformation. It’s an opportunity to grow your skills and experience as a valued member of the team.

Make your mark in Information Technology

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG’s businesses to achieve their goals. AIG’s Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

How you will create an impact

Within the Identity and Access Management (IAM) team, this Principal Engineer role will be responsible for designing, implementing, and maintaining solutions to secure our identities within our cloud environments. This role will focus on building security infrastructure and automation between security tools, requiring a strong background with the public cloud including AWS, Azure, and GCP. The ideal candidate will have a history of building, deploying and automating security tools using cloud technologies, and is comfortable working across multiple security domains including security operations and incident response.

Responsibilities

• Design, implement, and maintain identity solutions in cloud environments, including the platforms themselves, such as AWS, Entra / Azure, or GCP
• Establish and enforce IAM policies, standards, and procedures to ensure compliance with regulatory requirements and best practice
• Configure and manage identity providers to the cloud, including SSO, and related identity protection configurations
• Perform access reviews and risk assessments to identify and mitigate identity-related security vulnerabilities
• Automate IAM processes and workflows to improve efficiency and quality while reducing manual effort
• Reduce risk through least privilege access, using CSPM and CIEM solutions to identify risk and drive remediation efficiently and effectively
• Develop and implement secure onboarding processes for new cloud accounts, users, and resources across AWS, Azure, and other cloud platforms in compliance with federal regulations and security standards
• Provision and configure cloud security services including logging, config management, threat detection, and security monitoring for continuous protection
• Implement and enforce security controls to protect sensitive data and systems
• Collaborate with cross-functional teams to ensure secure integration of applications and services into the cloud environments
• Respond to security incidents, investigate root causes, and implement remediation measures to prevent future occurrences
• Document and maintain comprehensive security policies, procedures, and configurations for cloud environments

What you'll need to succeed

• Bachelor's degree in a Cybersecurity, Information Technology, or related field, such as Computer Science or Information Technology; Master’s degree preferred
• 10+ years in Information Security or Information Technology as an engineer including 7+ in cloud security
• Hands-on experience with IAM solutions, such as AWS IAM / Identity Center, Microsoft Entra ID (formerly Azure AD), etc.
• Demonstrated proficiency with deploying cloud resources such as EC2, S3, Lambda Functions
• Expert understanding of core networking concepts including TCP/IP, VPN and Layer 7
• Proficiency with cloud identity access management technologies, protocols, and implementations such as conditional access policies, SCIM/SAML integrations, SSO, MFA, etc.
• Extensive experience with creating and managing AWS Policies, AWS Service Control Policies and Azure Role Based Access Controls
• Hands on experience with agile and DevOps methodologies such as GitHub repositories, code pipelines and actions
• Demonstrated experience with scripting languages such as Python, PowerShell, and Infrastructure as Code (IAC) Terraform and CloudFormation
• Strong understanding of cloud architecture principles, including IaaS, PaaS, and SaaS.
• Experience with CSPM and CIEM solutions, such as Palo Alto Prisma Cloud
• Problem-solving mindset with a focus on delivering secure solution
• Self-starter who is proactive, motivated, and resourceful individual who takes ownership of their work, embraces challenges, and consistently strives for excellence
• Ability to think strategically and drive business outcomes
• Relevant certifications, such as CISSP, CISM, or other cloud security certification are a plus
• Excellent written and verbal communication skills demonstrated by cross functional team engagement, electronic communication, and program/process documentation
• Commitment to continuous learning and professional development around cloud technologies, automation and AI

Ready to step up to new challenges? We would love to hear from you.

For positions based in Jersey City, NJ the base salary range is $126,000-$171,000 and the position is eligible for a bonus in accordance with the terms of the applicable incentive plan. In addition, we’re proud to offer a range of competitive benefits, a summary of which can be viewed here: New_Hire_Benefits_Overview_202.pdf (sprinklr.com)

#LI-CN1

#Infosec #securityawarenees #securityoperations

Enjoy benefits that take care of what matters

At AIG, our people are our greatest asset. We know how important it is to protect and invest in what’s most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security—as well as your professional development—to bring peace of mind to you and your family.

Reimagining insurance to make a bigger difference to the world

American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world’s most far-reaching property casualty networks. It is an exciting time to join us — across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become.

Welcome to a culture of belonging

We’re committed to creating a culture that truly respects and celebrates each other’s talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through our flexible work arrangements, diversity and inclusion learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The diversity of our people is one of AIG’s greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations.

AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories.

AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities.  If you believe you need a reasonable accommodation, please send an email to candidatecare@aig.com.  

Functional Area:

IT - Information Technology

Estimated Travel Percentage (%): No Travel

Relocation Provided: No

AIG Employee Services, Inc.