Privileged Access Architect | IAM Leader & AI Security

Point72

New York (NY)

On-site

USD 140,000 - 200,000

Full time

14 days+

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Fully-paid health care benefits

Generous parental and family leave

Mental and physical wellness programs

Volunteer opportunities

Non-profit matching gift program

Support for employee-led affinity (LGT

Tuition assistance

A 401(k) savings program with anployer

Job summary

Point72 is seeking a senior IAM/Privileged Access Manager to lead and mature our privileged access program across enterprise systems. You will collaborate with infrastructure, security, cloud, and engineering teams to implement least privilege, lifecycle management, and risk-based access, while guiding cross-functional adoption and governance.

Ideal candidates bring 8–10 years in information security with strong IAM/Privileged Access experience, hands-on with CyberArk, SailPoint, and other

Qualifications

8–10 years of experience in information security, with a strong focus on identity and access management and privileged access management.
Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience.
Strong knowledge of privileged account lifecycle management, credential vaulting, privileged session management, least privilege, privileged elevation, and secrets management.
Hands‑on experience with enterprise privileged access management solutions, such as CyberArk, BeyondTrust, Delinea, Microsoft Entra PIM, or similar technologies.
Experience with identity governance and administration platforms, such as SailPoint Identity Security Cloud, IdentityIQ, Saviynt, or similar technologies.
Strong understanding of Active Directory, Microsoft Entra ID, Windows and Linux administration, enterprise authentication technologies, and authorization protocols, such as LDAP, Kerberos, SAML, OAuth, OpenID Connect, and multifactor authentication.
Knowledge of regulatory and security frameworks, such as SOX, ISO 27001, NIST, PCI DSS, or similar compliance standards.
Experience using data, operational metrics, dashboards, and enterprise‑approved artificial intelligence tools to identify trends, improve documentation, enhance analysis, and validate generated outputs.
Strong analytical, troubleshooting, communication, and stakeholder management skills, with demonstrated ability to resolve complex access issues and lead cross‑functional technology and process adoption.
Commitment to the highest ethical standards.

Responsibilities

Lead the implementation, adoption, and continuous improvement of the enterprise privileged access management program.
Develop and maintain privileged access policies, standards, governance processes, and operating procedures.
Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications, privileged accounts, service accounts, and systems into the platform.
Apply least privilege, segregation of duties, and risk‑based access principles across privileged access workflows and control remediation efforts.
Lead privileged access certification campaigns and audit responses by validating access rights, producing evidence, and remediating findings.
Monitor operational health, security posture, and program effectiveness through performance indicators, risk indicators, dashboards, trend analysis, and management reporting.
Automate manual processes using scripting, application programming interfaces, workflow automation, and targeted process improvements to reduce risk and improve efficiency.
Use enterprise‑approved artificial intelligence (AI) tools to accelerate analysis, streamline documentation, support troubleshooting, and improve decisions while validating generated outputs.
Integrate privileged access controls with identity governance, directory services, cloud security, infrastructure, audit, and risk processes across the enterprise.
Mentor team members and evaluate emerging capabilities to continuously mature the privileged access program.