IAM Privileged Access Lead (CyberArk)

Northern Trust; Tempe (AZ); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

Northern Trust is seeking a seasoned IAM PAM Lead in Tempe, AZ to guide CyberArk PAM capabilities and align privileged access with regulatory expectations. You will partner with security, engineering, risk, and audit teams to drive adoption, governance, and operational maturity across workforce and machine identities.

The ideal candidate brings 7+ years in IAM/Cybersecurity, deep CyberArk experience, and strong knowledge of least privilege, credential vaulting, and access governance, with

Qualifications

• 7+ years of experience in IAM, Cyber Security, or PAM-related disciplines.
• Deep experience administering or engineering CyberArk PAM solutions.
• Strong understanding of privileged account governance, credential vaulting, session management, secrets management, and least privilege principles.
• Experience with enterprise IAM capabilities including: Saviynt, Active Directory / Entra ID, Authentication and MFA platforms, Identity Governance & Administration, Non-Human Identity Management.
• Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations.
• Experience supporting audit, risk, compliance, and regulatory examinations within a highly regulated environment.

Responsibilities

• Serve as SME for CyberArk PAM platform including PAM, PSM, CPM, AAM/Secrets Management, EPM, PTA.
• Drive platform upgrades, integrations, onboarding, and operational maturity.
• Develop and maintain standards for privileged identity lifecycle management through CyberArk controls.
• Partner with IAM engineering teams to integrate CyberArk with critical infrastructure, cloud platforms, applications, databases, and automation tooling.
• Lead control design and continuous monitoring for privileged identities across workforce and non-human populations.
• Support RCSA, audit evidence collection, and regulatory examination activities impacting privileged access management.
• Develop automation and integration capabilities supporting provisioning, rotation, access review, and secrets management.
• Drive API-based integrations between CyberArk, IGA platforms, ticketing systems, cloud environments, and enterprise applications.
• Support modernization initiatives involving machine identity management and cloud privilege management.
• Collaborate with security architects to define privileged access requirements and present roadmap updates to senior leadership.

Skills

IAM

Cyber Security

PAM

CyberArk PAM

Active Directory

Entra ID

Governance & Compliance

Tools

CyberArk PAM

Saviynt

Active Directory / Entra ID

Job description

Northern Trust is seeking a seasoned IAM PAM Lead in Tempe, AZ to guide CyberArk PAM capabilities and align privileged access with regulatory expectations. You will partner with security, engineering, risk, and audit teams to drive adoption, governance, and operational maturity across workforce and machine identities.

The ideal candidate brings 7+ years in IAM/Cybersecurity, deep CyberArk experience, and strong knowledge of least privilege, credential vaulting, and access governance, with