Capital Group Logo

Capital Group

Information Security Engineer III

Posted 24 Days Ago
Be an Early Applicant
In-Office
Irvine, CA, USA
142K-227K Annually
Senior level
In-Office
Irvine, CA, USA
142K-227K Annually
Senior level
Engineer and modernize privileged access management across on-premises and cloud environments. Responsibilities include designing PAM solutions, supporting CyberArk or StrongDM, integrating ServiceNow and Azure, troubleshooting complex authentication issues, providing Tier 3 support, responding to incidents, remediating vulnerabilities, defining PAM standards and governance, and improving resiliency. Preferred experience includes machine identities, automated PAM administration, infrastructure-as-code, legacy platform modernization, migrations, recovery testing, and relevant security certifications.
The summary above was generated by AI

“I can be myself at work.”

You are more than a job title. We want you to feel comfortable doing great work and bringing your best, authentic self to everything you do. We value your talents, traditions, and uniqueness—and we’re committed to fostering a strong sense of belonging in a respectful workplace.  

We intentionally seek diverse perspectives, experiences, and backgrounds, investing in a culture designed to celebrate differences. We believe that belonging leads to better outcomes and a stronger community of associates united by our mission. At Capital, we live our core values every day: Integrity, Client Focus, Diverse Perspectives, Long-Term Thinking, and Community. 

 

“I can influence my income.” 

 

You want to feel recognized at work. Your performance will be reviewed annually, and your compensation will be designed to motivate and reward the value that you provide. You’ll receive a competitive salary, bonuses and benefits. Your company-funded retirement contribution will factor in salary and variable pay, including bonuses. 

 

“I can lead a full life.” 

 

You bring unique goals and interests to your job and your life. Whether you’re raising a family, you’re passionate about where you volunteer, or you want to explore different career paths, we’ll give you the resources that can set you up for success. 

  • Enjoy generous time-away and health benefits from day one, with the opportunity for flexible work options 

  • Receive 2-for-1 matching gifts for your charitable contributions and the opportunity to secure annual grants for the organizations you love 

  • Access on-demand professional development resources that allow you to hone existing skills and learn new ones 

“I can succeed as an Information Security Engineer III at Capital Group.”

As an Information Security Engineer III, you will help secure and modernize Capital Group's Privileged Access Management (PAM) capabilities within our Identity and Access Management (IAM) organization. You will design, implement, and support solutions that protect privileged access across on-premises and cloud environments while helping advance our security modernization strategy.

You will play a key role in several high-priority initiatives, including PAM platform modernization, StrongDM adoption, Privileged Access Workstation (PAW) enhancements, ServiceNow integration, Azure support. Your work will improve operational resiliency, reduce risk, and strengthen the security of critical systems across the enterprise.

You thrive in a direct engineering environment and enjoy solving complex security challenges, partnering with cross-functional teams, and delivering scalable solutions that balance security, efficiency, and user experience.

“I am the person Capital Group is looking for.”

  • You have 5+ years of experience in Information Security, Identity and Access Management (IAM), Privileged Access Management (PAM), or a related field.
  • You have firsthand experience with PAM technologies such as CyberArk, StrongDM or comparable platforms.
  • You possess a strong understanding of privileged access controls, identity management, authentication, authorization, and security best practices.
  • You have experience engineering privileged access across on-premises and cloud environments, including AWS, Azure, Kubernetes/EKS, Windows and Linux hosts, databases, command-line access, policy-driven authorization, and monitored sessions.
  • You have experience with Active Directory, enterprise identity services, and authentication and authorization technologies such as SSO, SAML, OIDC, OAuth 2.0, SCIM 2.0, RBAC, ABAC, certificate-based authentication, Kerberos, and just-in-time provisioning.
  • You can troubleshoot complex access and authentication issues and provide Tier 3 support, monitoring, incident response, root-cause analysis, vulnerability remediation, and resilient production operations for critical PAM services.
  • You communicate effectively across teams, translate complex technical concepts for varied audiences, take ownership of outcomes, and continually improve security and operational efficiency.
  • You can define and operationalize PAM standards, architecture patterns, controls, exception processes, lifecycle governance, metrics, and audit-ready reporting.

Preferred Skills & Experience

  • Experience securing non-human and machine identities, including service accounts, workload identities, certificates, secrets, and AI agents, with lifecycle governance and least-privilege controls.
  • Experience designing ServiceNow-integrated just-in-time or on-demand privileged-access workflows, including approvals, policy validation, provisioning, revocation, and audit evidence.
  • Experience automating PAM administration, onboarding, provisioning, credential rotation, monitoring, and policy enforcement using PowerShell, Python, Terraform, Ansible, or comparable infrastructure-as-code tooling.
  • Experience modernizing legacy PAM infrastructure, designing resilient cloud or colocation architectures, executing migrations and decommissioning, conducting recovery testing, and reducing technical debt.
  • Relevant security certifications such as CISSP, CyberArk, Microsoft, or AWS certifications.

“I can apply in less than 4 minutes.”  

  

You’ve reviewed this job posting and you’re ready to start the candidate journey with us. Apply now to move to the next step in our recruiting process. If this role isn’t what you’re looking for, check out our other opportunities and join our talent community.  

  

“I can learn more about Capital Group.”  

 

At Capital Group, the success of the people who invest with us depends on the people in whom we invest. That’s why we offer a culture, compensation and opportunities that empower our associates to build successful and prosperous careers. Through nine decades, our goal has been to improve people’s lives through successful investing. We know that our history is a testament to the strength of the people we hire. More than 9,000 associates in 30+ offices around the world help our clients and each other grow and thrive every day. Find us on LinkedIn, Instagram, YouTube and Glassdoor.‎ 

‎ 

Southern California Base Salary Range: $141,648-$226,637

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

‎ 

 ‎ 

 ‎

 ‎

In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital’s annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.

You can learn more about our compensation and benefits here.

* Temporary positions in the United States are excluded from the above mentioned compensation and benefit plans.


We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.

HQ

Capital Group Los Angeles, California, USA Office

Los Angeles, CA, United States

Capital Group Irvine, California, USA Office

6455 Irvine Center Drive , Irvine, CA, United States, 92618

Similar Jobs

20 Minutes Ago
In-Office
157K-210K Annually
Senior level
157K-210K Annually
Senior level
Cloud • Information Technology • Machine Learning
Leads a technical support engineering team responsible for bare-metal and physical compute infrastructure. Oversees incident response, escalations, hardware diagnostics and replacement, client communications, support workflows, staffing, and operational metrics. Builds scalable infrastructure support processes, partners with engineering and product teams, and develops team members supporting GPU-intensive environments and 24/7 operations.
Top Skills: JIRALinuxLiquid CoolingNvidia A100Nvidia H100NvlinkPcieZendesk
21 Minutes Ago
Easy Apply
Remote or Hybrid
USA
Easy Apply
134K-168K Annually
Senior level
134K-168K Annually
Senior level
Cloud • Information Technology • Security • Software • Cybersecurity
Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.
Top Skills: Ai/MlCertEdr/XdrJavaScriptNistNsaPythonSIEMSoarUebaZscaler Cyberrisk ProtectionZscaler Data ProtectionZscaler Zero Trust Networking
26 Minutes Ago
Remote or Hybrid
US
78K-108K Annually
Mid level
78K-108K Annually
Mid level
Information Technology
Provides Microsoft core infrastructure support for managed-services customers in a reactive break/fix environment. Troubleshoots Windows Server, Active Directory, domain controllers, Group Policy, DNS, DHCP, SCCM, endpoint management, Azure, and Microsoft 365 issues. Manages case queues, resolves incidents, documents solutions, communicates with customers, meets SLAs, participates in on-call support, contributes to infrastructure projects, mentors peers, and identifies customer needs.
Top Skills: Active DirectoryAzureDhcpDnsDomain ControllersEndpoint ManagementGroup PolicyHybrid InfrastructureMicrosoft 365SccmWindows Server

What you need to know about the Los Angeles Tech Scene

Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.

Key Facts About Los Angeles Tech

  • Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
  • Key Industries: Artificial intelligence, adtech, media, software, game development
  • Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
  • Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account