Cybersecurity Engineer - Privileged Access Management

At Moody's, we unite the brightest minds to turn today’s risks into tomorrow’s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody’s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we’re advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity. 

Skills and Competencies

• 3–7 years of IAM engineering experience with 2+ years in direct Privileged Access Management in enterprise or regulated environments
• Strong scripting expertise (Python/ PowerShell) with working knowledge of Java or similar programming languages
• Experience in system integration using REST APIs, SCIM, webhooks, and event-driven architectures, with knowledge of authentication protocols (OAuth 2.0, mTLS, API keys, JWT, SAML, OIDC)
• Solid understanding of identity lifecycle management (JML, Active Directory lifecycle) and Non-Human Identity (NHI) security (service accounts, API keys, workload identities)
• Hands-on PAM expertise including credential vaulting, password rotation, privileged session management/monitoring, JIT and least privilege access, break-glass governance, and access reviews/certifications, along with RBAC/ABAC models
• Strong foundation in core security principles (Zero Trust, least privilege, segregation of duties, auditability) with additional exposure to tools like BeyondTrust (Password Safe, DevOps Secrets Safe, PRA, EPM, Insights), ServiceNow integrations, and SailPoint (IIQ/ISC) for IGA/PAM convergence will be a plus
• Experience with cloud platforms (Azure preferred, AWS/GCP) with familiarity of DevOps ecosystem (CI/CD pipelines, Git, automated testing, Terraform, Helm, Kubernetes, Docker)
• Demonstrated proficiency in artificial intelligence concepts, with hands-on experience using AI tools to streamline workflows and enhance operational efficiency. Proven ability to implement AI-powered solutions to solve business challenges. Demonstrates a growing awareness of AI risk management and a commitment to responsible and ethical AI use.

Education

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent practical experience

Responsibilities

Design, build, and scale secure, cloud-first identity and privileged access management solutions that support a global enterprise and enable highly automated, reliable identity services.

• Design, develop, and enhance IAM and PAM capabilities across authentication, authorization, identity governance, and privileged access management
• Build and maintain integrations using REST APIs, SCIM, web services, and event-driven architectures
• Implement and optimize identity lifecycle processes (provisioning, access requests, deprovisioning, certifications, and privileged access reviews)
• Define and enforce access models and policies (least privilege, Just-in-Time access, break-glass governance) aligned with business and security needs
• Develop automation and reusable services (credential vaulting, password rotation) to improve efficiency and system reliability
• Implement CI/CD pipelines, automated testing, and version-controlled deployments for IAM and PAM solutions
• Enhance observability through logging, monitoring, alerting, service health metrics, and privileged session tracking
• Troubleshoot complex issues, drive root cause analysis, leverage AI-driven automation for identity operations/anomaly detection, and collaborate with security, engineering, and product teams while maintaining documentation, runbooks, and audit/compliance readiness

About the Team

The Identity and Access Management team is focused on building and operating a modern, scalable, and secure identity and privileged access platform that supports Moody’s global workforce and technology ecosystem. The team partners closely with cybersecurity, engineering, and business stakeholders to deliver automated, cloud-first identity and PAM solutions that enable innovation while maintaining strong security, governance, and compliance standards.

Moody’s is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.

Candidates for Moody's Corporation may be asked to disclose securities holdings pursuant to Moody’s Policy for Securities Trading and the requirements of the position. Employment is contingent upon compliance with the Policy, including remediation of positions in those holdings as necessary.