Senior IAM & PAM Engineer - Hybrid Role

Wintrust Financial Corp.; Illinois; Hybrid; USD 135,000 - 165,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision

401(k) with company match

Parental Leave

Employee Assistance Program (EAP)

Stock Purchase Plan

Job summary

Wintrust Financial Corp. is seeking a Senior Identity Access Management Engineer in Rosemont, IL to design, implement, and maintain critical security systems in the Identity domain.

This role focuses on privileged access management and NHI, supporting hybrid IAM environments with strong knowledge of IAM best practices. You will contribute to the IAM roadmap, lead Just-in-Time elevation initiatives, and collaborate with IT across AD/EntraID, Kerberos/SAML/OIDC, and CA.

Qualifications

• Bachelor's degree or equivalent experience.
• 5-7 years of hands-on professional IAM experience.
• Experience with enterprise PAM environments and Delinea/EntraID PIM.

Responsibilities

• Contribute to IAM roadmap and vision.
• Expert understanding of Delinea/Thycotic products on-prem and cloud.
• Govern Non-Human Identity (NHI) lifecycle management.
• Cross-functional liaison to IT including AD, EntraID, authentication protocols, and CA.
• Automation and scripting for credential rotation and API integrations.
• Define IT Policy Standards and Security Governance for privileged accounts.

Skills

PAM (Delinea/Secret Server)

EntraID/AD

Scripting (PowerShell/Python)

Zero Trust / Just-in-Time elevation

Hybrid IAM

API integrations

Education

Bachelor's degree or equivalent experience

Tools

Delinea Secret Server

EntraID

Job description

Wintrust Financial Corp. is seeking a Senior Identity Access Management Engineer in Rosemont, IL to design, implement, and maintain critical security systems in the Identity domain.

This role focuses on privileged access management and NHI, supporting hybrid IAM environments with strong knowledge of IAM best practices. You will contribute to the IAM roadmap, lead Just-in-Time elevation initiatives, and collaborate with IT across AD/EntraID, Kerberos/SAML/OIDC, and CA.