{"id":3764914,"url":"https://alion.io/job/hub-international-privilege-access-management-engineer","title":"Privilege Access Management Engineer","company":{"id":1768415,"name":"HUB International","domain":"hubinternational.com","url":"https://alion.io/company/hubinternational-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":76,"ghost_share":0,"stale_share":0.645,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Delinea","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SOAP","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-04T19:42:44Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T01:05:31Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"A path for every ambition.\nAt HUB, we believe the best work happens when people are given real space to grow and then given the autonomy to exercise it. We power progress and protect ambition: for the clients who count on us, and equally for the people who make that possible every day.\nWe’re creative thinkers and determined doers, guided by values that show up in how we work together: with empathy, adaptability, accountability and a genuine commitment to one another’s success. We foster bold ideas, celebrate curiosity and share what we know. Because when people grow, the work they do grows with them.\nOur purpose is deeply human: to help people navigate the world on their terms, at their speed, toward their future. We hold that same commitment to the people building careers here.\nWhether you’re starting out or leveling up, you’ll find the resources to evolve, the support to take on more and a team ready to back you at every stage.\nYour ambition has a home here.\nJob Description\nABOUT US\nAt HUB International, we are a team of entrepreneurs. We believe in protecting and supporting the aspirations of individuals, families, and businesses. We help our clients evaluate their risks and develop solutions tailored to their needs. We believe in empowering our employees to learn, grow, and make a difference. Our structure enables our teams to maintain their own unique, regional culture while leveraging support and resources from our corporate centers of excellence.\nHUB is a global insurance and employee benefits broker, providing a boundaryless array of business insurance, employee benefits, risk services, personal insurance, retirement, and private wealth management products and services. With over $5 billion in revenue and almost 20,000 employees in 600 offices throughout North America, HUB has grown substantially, in part due to our industry leading success in mergers and acquisitions\nABOUT THIS ROLE\nIn this role, you will manage multiple aspects of information security operations, response, and engineering. This position will contribute to a team focusing on the included, but not limited to, incident response, playbook development and execution, operational engineering, tooling maintenance, as well as being a key participant within Information security programs. They will work in close collaboration with all HUB IT teams to design and support effective Information Security Operations for Hub International.\nJob Description\nThe Security Identity PAM Engineer is responsible for implementing, maintaining, and developing HUB’s Privileged Access Management platforms. This role focuses on automation, integration, and customization ensuring robust and scalable identity services across the organization. The ideal candidate will have strong knowledge of IAM concepts, with the ability to improve and strengthen HUB’s privileged access foundations.\nObjectives of this Role\nManages and is responsible for the successful completion of all tasks in assigned projects.\nContribute to Security Support and Identity Operations Team focused on maintaining the security integrity of HUB’s PAM suite of applications.\nAvailable 24/7 for any critical security incident response that may arise which requires immediate resolution.\nWork to ensure security identity tooling within HUB environments is operational and operating at needed levels of service and availability.\nContribute to identity operations KPIs to measure operational performance.\nMaintain current knowledge of relevant information security identity, authentication, authorization, and governance technology and techniques, bringing forth ideas for modernization and improvement.\nEnsure identity operations practices provide a sound foundation that utilizes tools and processes for rapid identification of security events to address and mitigate risks.\nEngage with peers regularly on security operations functions, project status, activities, and achievements.\nContribute to “Continuous Improvement” efforts, in respect to HUB’s information security identity tooling and systems.\nAssist in planning, organizing, and executing multiple responsibilities to achieve project goals and provide technical leadership to move operational projects to completion.\nContribute to security requirements, standards, procedures, and reference architectures to comply with policies and technical standards.\nDaily and Monthly Responsibilities\nContribute with analysis, governance, and certification operations related to identity management.\nContribute to weekly and monthly posture and identity operations reporting.\nCreate and maintain technical documentation, including solution architecture, process flows, and configuration guides.\nTroubleshoot PAM-related issues and ensure high availability and performance of identity services.\nContribute to the analysis and recommendation of upgrades, changes, implementation specific to the support and scaling of HUB’s security identity operations.\nImplement, administer, and maintain HUB’s privileged access management platforms, including Delinea/Thycotic Secret Server, Admin by Request, and Keeper.\nManage credential vaulting, automated secret rotation, and session recording/monitoring within Secret Server.\nManage the lifecycle of, and certification campaigns for, HUB’s privileged credentials and secrets\nDesign and maintain endpoint privilege elevation workflows and approval chains using Admin by Request.\nAdminister role-based access and shared credential structures within Keeper.\nIntegrate PAM platforms with SailPoint ISC to unify privileged account discovery and access certification.\nSkills and Qualifications\nBachelor’s degree in technology or applicable experience.\nRelated certifications (e.g., GSEC, CISSP, GIAC, AWS) preferred.\n3+ Years of experience within Identity and Access Management roles.\n5+ years of experience with cloud infrastructure (AWS, GCP, Azure) and O365 services and technology.\nExperience with, but not excluded to: SAML, OID, oAuth, SCIM, MFA.\nExperience working with and managing Active Directory / MS Entra ID.\nExperience with PowerShell, python, shell scripting, XML, JSON, REST/SOAP.\nWorking knowledge of Active Directory, MS Entra ID, and Okta.\nKnowledge of information security identity standards, principles, and practices required.\nKnowledge of industry security standards, guidelines, and regulatory/compliance requirements related to information security such as ISO 27001, NIST 800-53, SOC2, PCI, SOX, etc.\n3+ years of hands-on experience with Delinea/Thycotic Secret Server, including vaulting, secret rotation, policy configuration, discovery, and reporting.\nExperience with Admin by Request for endpoint privilege management, including elevation request/approval workflows and application control policies.\nExperience with Keeper (Keeper Secrets Manager / Keeper Enterprise) for secrets vaulting, credential sharing, and access provisioning.\nKnowledge of just-in-time (JIT) privileged access provisioning and least-privilege enforcement, including removal of standing local admin rights.\nExperience with privileged session management, session recording/monitoring, and break-glass/emergency access account procedures.\nExperience managing service account and application-to-application (A2A) credential rotation via PAM platform APIs.\nAbility to integrate PAM platforms (Secret Server, Admin by Request, Keeper) with SailPoint ISC and ITSM/ticketing systems for unified governance and audit reporting.\nPrioritization, decision making, critical thinking, communication, and relationship building skills.\nAbility to work independently and in a team environment.\nThis position reports into Chicago.\nWillingness to travel up to 10% of working time.\n\nJOIN OUR TEAM\nDo you believe in the power of innovation, collaboration, and transformation? Do you thrive in a supportive and client focused work environment? Are you looking for an opportunity to help build and drive change in a rapidly growing and evolving organization? When you join HUB International, you will be part of a community of learners and doers focused on our Core Values: entrepreneurship, teamwork, integrity, accountability, and service.\nThe expected salary range for this position is $ 100,000 to $120,000 and will be impacted by factors such as the successful candidate’s skills, experience and working location, as well as the specific position’s business line, scope and level. HUB International is proud to offer comprehensive benefit and total compensation packages which could include health/dental/vision/life/disability insurance, FSA, HAS and 401(k) accounts, paid-time-off benefits such as vacation, sick, personal, floating holidays and company holidays. In addition, eligible annual bonuses, equity and commissions may be available for some positions.\nWhat we offer you\nWe invest in your growth. HUB offers structured training, licensing support,and ongoing development opportunities designed to accelerate your career. Benefits and programs vary based on employment status, role, location, and applicable eligibility requirements.\nCompetitive pay with comprehensive health benefits, retirement savings matching, and company-paid life and disability plans\nGenerous paid time off, paid parental leave and a wellbeing program designed to support real work/life balance\nA collaborative, high-performing culture with meaningful engagement, community impact through HUB Gives and genuine room to grow your career\nThe HUB difference\nHUB International is one of North America’s largest insurance brokers, delivering risk management, insurance, employee benefits, retirement and wealth management solutions to businesses and individuals across the United States and Canada - through locally led teams backed by national expertise, giving you the agility of a local partner and the reach of a global organization.\nEqual Employment Opportunity: HUB International Limited is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.\nReasonable Accommodations: HUB International Limited is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you need a reasonable accommodation to access our career site, complete an application, or participate in any part of the hiring process, please contact the Recruiting Team at . This contact information is for accommodation requests only and should not be used to inquire about the status of an application.\nE-Verify: HUB International Limited participates in E-Verify. Please refer to Our Recruiting Process | Applicant Notices: E-Verify Program for additional information.","description_format":"text","description_chars":10934,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Annual bonuses","Equity","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Health Insurance & Benefits","Insurance Brokers & Agencies"],"lifecycle":[{"event":"open","at":"2026-11-04T19:42:44Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-05T02:01:54Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/hub-international-privilege-access-management-engineer","json_url":"https://alion.io/job/hub-international-privilege-access-management-engineer.json","meta":{"generated_at":"2026-11-05T02:01:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2620,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1768415},"rest":"https://alion.io/mcp/rest/get_company?id=1768415"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhub-international-privilege-access-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhub-international-privilege-access-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhub-international-privilege-access-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hub-international-privilege-access-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhub-international-privilege-access-management-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3764914}},{"tool":"search_jobs","arguments":{"company":"hubinternational.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3764914},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}