Lead PAM Engineer — CyberArk & IAM Strategy

ntrs; Tempe (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Northern Trust in Tempe, AZ seeks an experienced IAM PAM Lead to own strategy, governance, and engineering of privileged access management. You will collaborate with Cyber Security, Infrastructure, and application teams to reduce risk associated with privileged and non-human identities.

The role centers on CyberArk PAM platform ownership, upgrades, policy standards, and integrations with cloud and on-prem environments, ensuring alignment with NIST, FFIEC and financial services best practices.

Qualifications

• 7+ years of experience in IAM or PAM disciplines.
• Deep experience administering or engineering CyberArk PAM solutions.
• Strong understanding of privileged account governance, credential vaulting, session management and least privilege.
• Experience with enterprise IAM capabilities including Saviynt, AD/Entra ID authentication and MFA platforms.
• Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations.
• Experience supporting audit, risk, compliance, and regulatory examinations in a highly regulated environment.

Responsibilities

• CyberArk platform ownership including PAM, PSM, CPM, AAM/Secrets Management, and EPM.
• Drive platform upgrades, integrations, onboarding, and operation maturation.
• Develop and maintain standards for privileged account lifecycle management.
• Partner with engineering teams to integrate CyberArk with critical infrastructure, cloud, apps, databases, and automation tooling.
• Lead governance and oversight of privileged access controls across workforce and non-human identities.
• Present PAM strategy, risk posture, metrics, and roadmaps to leadership and regulators.

Skills

IAM

Cyber Security

PAM

Privileged access governance

Least privilege

Tools

CyberArk PAM

Saviynt

Active Directory

Entra ID

Job description

Northern Trust in Tempe, AZ seeks an experienced IAM PAM Lead to own strategy, governance, and engineering of privileged access management. You will collaborate with Cyber Security, Infrastructure, and application teams to reduce risk associated with privileged and non-human identities.

The role centers on CyberArk PAM platform ownership, upgrades, policy standards, and integrations with cloud and on-prem environments, ensuring alignment with NIST, FFIEC and financial services best practices.