CyberArk PAM Lead - IAM Privileged Access Architect

Cyber Security Jobs; Tempe (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Northern Trust in Tempe, AZ is seeking an IAM PAM Lead to own CyberArk PAM platform, governance, and integration across systems. You will partner with Cyber Security Engineering, Infrastructure, and Risk to reduce privileged access risk and ensure compliance with NIST/FFIEC standards.

The role focuses on platform upgrades, lifecycle management, and automation of provisioning, rotation, and access reviews, enabling secure enterprise identities and non-human identities.

Qualifications

• 7+ years of IAM, Cyber Security, or PAM discipline.
• Deep experience administering or engineering CyberArk PAM.
• Strong understanding of privileged account governance and least privilege.
• Experience with enterprise IAM capabilities including Saviynt, Active Directory/Entra ID, MFA, IGA.
• Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations.
• Experience supporting audit, risk, compliance, and regulatory examinations within a highly regulated environment.

Responsibilities

• Serve as SME for CyberArk platform components (PAM, PSM, CPM, AAM, EPM, PTA).
• Drive platform upgrades, integrations, onboarding, and operational maturity activities.
• Develop and maintain standards for privileged account lifecycle management through CyberArk controls.
• Partner with engineering to integrate CyberArk with critical infrastructure, cloud platforms, applications, databases, and automation tooling.
• Lead control design and continuous monitoring efforts for privileged identities across workforce and non-human populations.
• Evaluate privileged access risks, control gaps, policy exceptions, and remediation plans.
• Implement detective controls and monitoring capabilities for privileged account activities and administrative sessions.
• Develop automation and integration capabilities for provisioning, credential rotation, access review, and secrets management.
• Drive API-based integrations between CyberArk, IAM platforms, ticketing systems, cloud environments, and enterprise applications.
• Support modernization initiatives involving machine identity management, cloud privilege management, and privileged authorization models.
• Present PAM strategy, risk posture, metrics, and roadmap updates to senior leadership and regulators.

Skills

CyberArk PAM

Privileged Access

IAM Governance

Least Privilege

Regulatory Compliance

Active Directory

Tools

Saviynt

CyberArk PAM

Entra ID

Job description

Northern Trust in Tempe, AZ is seeking an IAM PAM Lead to own CyberArk PAM platform, governance, and integration across systems. You will partner with Cyber Security Engineering, Infrastructure, and Risk to reduce privileged access risk and ensure compliance with NIST/FFIEC standards.

The role focuses on platform upgrades, lifecycle management, and automation of provisioning, rotation, and access reviews, enabling secure enterprise identities and non-human identities.