Senior IAM Engineer - Zero-Trust & PAM Leader

Wintrust Financial Corporation; Rosemont (IL); On-site; USD 135,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Dental

Vision

Life insurance

401(k) with match

FSA

Employee Stock Purchase Plan

Job summary

Wintrust Financial Corporation is seeking a Senior Identity Access Management Engineer to design, implement, and maintain critical security systems in the Identity domain. You will lead privileged access management and NHI initiatives across hybrid environments.

The role requires expertise in Delinea Secret Server, EntraID, and Active Directory, with a focus on Just-in-Time elevation and secure cross-system integration.

Qualifications

• Bachelor’s degree or equivalent experience.
• 5-7 years of hands-on professional experience.
• Experience architecting, deploying, and managing an enterprise PAM environment with Delinea Secret Server or EntraID PIM.
• Experience removing standing privilege by using just-in-time access or dynamic elevation models.
• Hands-on experience with cloud migrations while managing hybrid Active Directory environments.

Responsibilities

• Design, implement, and maintain critical security systems within the Identity domain.
• Serve as SME focused on privileged access management and NHI.
• Lead lifecycle management of NHI and emerging AI agents in a hybrid environment.
• Support IAM roadmap and vision; champion zero trust and least privilege.

Skills

Zero Trust

Just-in-Time elevation

Delinea Secret Server

EntraID

PAM

Active Directory

Scripting (PowerShell Bash Python)

Cloud migrations

Education

Bachelor’s degree or equivalent experience

Tools

Delinea/Thycotic stack

EntraID PIM

Job description

Wintrust Financial Corporation is seeking a Senior Identity Access Management Engineer to design, implement, and maintain critical security systems in the Identity domain. You will lead privileged access management and NHI initiatives across hybrid environments.

The role requires expertise in Delinea Secret Server, EntraID, and Active Directory, with a focus on Just-in-Time elevation and secure cross-system integration.