Identity Engineer (PAM)

At Nielsen, we are passionate about our work to power a better media future for all people by providing powerful insights that drive client decisions and deliver extraordinary results. Our talented, global workforce is dedicated to capturing audience engagement with content - wherever and whenever it’s consumed. Together, we are proudly rooted in our deep legacy as we stand at the forefront of the media revolution. When you join Nielsen, you will join a dynamic team committed to excellence, perseverance, and the ambition to make an impact together. We champion you, because when you succeed, we do too. We enable your best to power our future.

Summary/Objective: The Identity (PAM) Engineer will play a crucial role in enhancing our identity and access management (IAM) program, with a specific focus on privileged account management. We are seeking a dedicated professional with expertise in PAM solutions, including CyberArk, Okta, and Active Directory. The ideal candidate will collaborate with peers to ensure secure and efficient management of privileged accounts across our systems and applications.

Essential Functions:

Collaborate with the identity team on the design, construction, implementation, and daily management of initiatives related to privileged account management solutions.

Utilize deep understanding of PAM, security, and industry-specific regulatory practices to enhance our PAM program.

Work closely with IT system administrators and application owners to support and enhance existing PAM processes.

Administer and maintain the CyberArk Privileged Access System, password vault, and integrations.

Collaborate with IAM teams to ensure compliance with internal policies and standards.

Review access logs, monitor user activity, and identify anomalies or security risks related to privileged accounts.

Participate in IT audits and respond to audit findings related to PAM processes.

Develop and maintain audit documentation, including policies, procedures, and evidence of compliance.

Competencies:

Minimum 3 years of hands-on administration experience with PAM solutions, with emphasis on CyberArk.

Experience building custom SSO integrations (SAML, OAuth, WS-FED/WS-TRUST) in PAM systems.

Deep knowledge of principal IAM products, including CyberArk, Okta, and Active Directory.

Technical expertise to work as a developer in an implementation capacity.

Strong understanding of access controls, identity governance, and security best practices.

Familiarity with Cloud, SSO, and MFA.

Excellent documentation skills for clients (business and technical requirements, support guides, etc.).

Education and Certification:

A Bachelor’s degree in identity and access management, cybersecurity, information technology, or related field is usually preferred. However, applicants with a combination of relevant professional experience, education, and professional PAM certification will also be considered for the position.

Relevant certifications may include:

Certified Information Systems Security Professional (CISSP)

Certified Information Systems Auditor (CISA)

CyberArk certifications

Please be aware that job-seekers may be at risk of targeting by scammers seeking personal data or money. Nielsen recruiters will only contact you through official job boards, LinkedIn, or email with a nielsen.com domain. Be cautious of any outreach claiming to be from Nielsen via other messaging platforms or personal email addresses. Always verify that email communications come from an @nielsen.com address. If you're unsure about the authenticity of a job offer or communication, please contact Nielsen directly through our official website or verified social media channels.