C

Capital Group

Asset management with long-term portfolios

Information Security Engineer 3

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeIn-person

About the Job

Requirements

  • At least 10 years of experience in Information Security, Identity and Access Management (IAM), Privileged Access Management (PAM), or a related field.
  • Firsthand experience with PAM technologies such as CyberArk and StrongDM.
  • Strong understanding of privileged access controls, identity management, authentication, authorization, and security best practices.
  • Experience engineering privileged access across on-premises and cloud environments, including AWS, Azure, Kubernetes/EKS, Windows and Linux hosts, databases, command-line access, policy-driven authorization, and monitored sessions.
  • Experience with Active Directory, enterprise identity services, and authentication and authorization technologies such as single sign-on (SSO), Security Assertion Markup Language (SAML), OpenID Connect (OIDC), OAuth 2.0, SCIM 2.0, role-based access control (RBAC), attribute-based access control (ABAC), certificate-based authentication, Kerberos, and just-in-time provisioning.
  • Ability to troubleshoot complex access and authentication issues and provide Tier 3 support, monitoring, incident response, root-cause analysis, vulnerability remediation, and resilient production operations for critical PAM services.
  • Ability to define and operationalize PAM standards, architecture patterns, controls, exception processes, lifecycle governance, metrics, and audit-ready reporting.

Responsibilities

  • Design, implement, and support solutions that protect privileged access across on-premises and cloud environments.
  • Help advance the organization's security modernization strategy, including PAM platform modernization, StrongDM adoption, Privileged Access Workstation (PAW) enhancements, ServiceNow integration, and Azure support.
  • Partner with cross-functional teams to deliver scalable security solutions that balance security, efficiency, and user experience.
  • Improve operational resiliency, reduce risk, and strengthen the security of critical enterprise systems.

Desired Qualifications

  • Experience securing non-human and machine identities, including service accounts, workload identities, certificates, secrets, and AI agents, with lifecycle governance and least-privilege controls.
  • Experience designing ServiceNow-integrated just-in-time or on-demand privileged-access workflows, including approvals, policy validation, provisioning, revocation, and audit evidence.
  • Experience automating PAM administration, onboarding, provisioning, credential rotation, monitoring, and policy enforcement using PowerShell, Python, Terraform, Ansible, or comparable infrastructure-as-code tooling.
  • Experience modernizing legacy PAM infrastructure, designing resilient cloud or colocation architectures, executing migrations and decommissioning, conducting recovery testing, and reducing technical debt.
  • Relevant security certifications such as CISSP, CyberArk, Microsoft, or AWS certifications.

About the Company

Capital Group

Asset management with long-term portfolios

Capital Group is a private investment firm managing equity and fixed-income assets for millions of investors. It builds long-term, high-conviction portfolios using rigorous research and the American Funds lineup to pursue steady, durable results rather than short-term trades. It differentiates itself through strong personal accountability, a globally distributed team, and a research-driven investment process. Its goal is to improve people’s lives through successful investing.

Company size
5,001-10,000
Company stage
Not listed
Total funding
$65.4B
Headquarters
Dongcheng District, China
Founded
Not listed

Recently Posted Jobs

Explore more opportunities at Capital Group

See more jobs