Sr Lead - IAM Privileged Access Engineering

Description

The company is a global wealth management, asset servicing, asset management and banking firm, listed on Nasdaq, that serves individual, family, corporate and institutional clients. It has operated since 1889, guided by the principles of Service, Expertise and Integrity, and has more than 135 years of financial experience and over 24,000 employees, called partners.

This lead role owns the strategy, governance, engineering, day-to-day oversight and ongoing improvement of the company's privileged access management. You will work with cyber security engineering, infrastructure, application development, risk, audit, compliance and business technology teams to lower cyber risk from privileged accounts, admin access, elevated entitlements and non-human identities.

You will drive adoption and governance of CyberArk, the approved PAM tool for privileged credentials, session monitoring, governance and audit reporting, while supporting the wider IAM strategy across workforce, privileged and machine identities. Privileged controls must meet regulatory expectations, internal standards, least privilege and frameworks such as NIST, FFIEC and financial services best practice.

Responsibilities

• Act as the subject matter expert for CyberArk PAM, PSM, CPM, AAM/Secrets Management, EPM and PTA.
• Lead upgrades, integrations, onboarding and operational maturity work on the platform.
• Write and maintain standards for the lifecycle of privileged accounts using CyberArk controls.
• Work with engineering teams to connect CyberArk to critical infrastructure, cloud platforms, applications, databases and automation tools.
• Make sure privileged controls meet company security policy, audit requirements and regulatory obligations.
• Design controls and run continuous monitoring for privileged identities, human and non-human.
• Assess privileged access risks, control gaps, policy exceptions and remediation plans.
• Support RCSA, audit evidence collection and regulatory examinations that touch privileged access.
• Build detective controls and monitoring for privileged account activity and admin sessions.
• Build automation and integrations for privileged account provisioning, credential rotation, access review and secrets management.
• Deliver API integrations between CyberArk, IGA platforms, ticketing systems, cloud environments and enterprise applications.
• Support work on machine identity management, cloud privilege management and privileged authorization models.
• Work with IAM engineering to improve scalability, reliability and operational efficiency of PAM services.
• Lead the PAM engineering and operations teams and set their direction.
• Work with infrastructure, cloud, application and security architects to define privileged access requirements.
• Present PAM strategy, risk position, metrics and roadmap to senior leaders, governance forums and regulators.
• Shape enterprise technology decisions on admin access, privileged credentials and identity security architecture.

Requirements

• Have 7+ years in IAM, cyber security or PAM work.
• Have deep hands-on experience administering or engineering CyberArk PAM.
• Understand privileged account governance, credential vaulting, session management, secrets management and least privilege well.
• Have experience with enterprise IAM, including Saviynt, Active Directory or Entra ID, authentication and MFA platforms, identity governance and administration, and non-human identity management.
• Be familiar with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT and financial services regulatory expectations.
• Have supported audit, risk, compliance and regulatory examinations in a heavily regulated environment.

Conditions

You must be authorized to work in the U.S. now and in the future without employment-based visa sponsorship. The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

The company is an equal opportunity employer.

Benefits

• Flexible, collaborative culture with a long record of financial strength and stability.
• Internal moves are encouraged and senior leaders are easy to reach.
• Opportunities to give time and skills to community causes, a long-standing part of the company's culture.