Senior IAM Engineer: Privileged Access & PAM Expert (Hybrid)

Wintrust Financial Corporation; Chicago, Northern (IL, KY); Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

401(k) with company match

Parental Leave

Employee Assistance Program

Job summary

Wintrust Financial Corporation is seeking a Senior Identity Access Management Engineer to design, implement, and maintain critical security systems across hybrid IAM environments. You will lead privileged access management and Non-Human Identity (NHI) initiatives, integrating EntraID and Delinea products, and driving just-in-time elevation.

You will collaborate with security architecture, IT operations, and architecture teams to enforce least privilege, automate credential rotation, and ensure

Qualifications

• Bachelor's degree or equivalent experience.
• 5-7 years of hands-on professional IAM experience.
• Enterprise PAM experience with Delinea Secret Server or EntraID PIM.
• Experience removing standing privilege via just-in-time elevation.

Responsibilities

• Contribute to IAM roadmap and vision, champion zero trust and least privilege.
• Lead lifecycle management of NHI and secure machine-to-machine interactions across hybrid environment.
• Manage privileged access and automation tasks via scripting (PowerShell, Bash, Python).
• Collaborate with IT on Active Directory, EntraID, Kerberos/SAML/OIDC integration and CA policies.
• Support cloud migrations while handling complex hybrid AD environments.

Skills

Zero Trust

Just-in-Time

Delinea Secret Server

EntraID

PIM

Active Directory

PowerShell

Python

SAML/OIDC

Kerberos

Education

Bachelor's degree or equivalent experience

Tools

Delinea Secret Server

EntraID

PIM

Job description

Wintrust Financial Corporation is seeking a Senior Identity Access Management Engineer to design, implement, and maintain critical security systems across hybrid IAM environments. You will lead privileged access management and Non-Human Identity (NHI) initiatives, integrating EntraID and Delinea products, and driving just-in-time elevation.

You will collaborate with security architecture, IT operations, and architecture teams to enforce least privilege, automate credential rotation, and ensure