Sr Lead - IAM Privileged Access Engineering

001 The Northern Trust Company; Tempe (AZ); On-site; USD 140,000 - 210,000; Full time

Job summary

The Northern Trust Company is seeking a senior Identity & Access Management (IAM) Privileged Access Management Lead in Tempe, AZ. The role drives the strategy, governance, and engineering of CyberArk PAM, collaborating with Cyber Security, Infrastructure, and Application teams to reduce risk from privileged accounts and non-human identities.

Responsibilities include platform upgrades, lifecycle management, and integration with cloud and on-premise systems, while ensuring alignment with NIST,

Qualifications

• 7+ years of experience in IAM, Cyber Security, or PAM-related disciplines.
• Deep experience administering or engineering CyberArk PAM solutions.
• Strong understanding of privileged account governance, credential vaulting, session management, secrets management, and least privilege principles.
• Experience with enterprise IAM capabilities including Saviynt, AD/Entra ID, MFA platforms, Identity Governance & Administration, Non-Human Identity Management.
• Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations.
• Experience supporting audit, risk, compliance, and regulatory examinations within a highly regulated environment.

Responsibilities

• Lead PAM engineering and operations teams and set strategic direction.
• Drive platform upgrades, integrations, onboarding, and operational maturity for CyberArk and PAM.
• Develop and maintain standards for privileged identity lifecycle management and secret management.
• Collaborate with IAM engineering teams to integrate CyberArk with infrastructure, cloud platforms, applications, databases, and automation tools.
• Present PAM strategy, risk posture, and roadmaps to senior leadership and regulators.

Skills

IAM

CyberArk PAM

Privileged access governance

Enterprise IAM

Regulatory compliance

Audit support

Tools

CyberArk PAM

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions. Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Identity & Access Management (IAM) Privileged Access Management (PAM) Lead

The Identity & Access Management (IAM) Privileged Access Management (PAM) Lead is responsible for the strategy, governance, engineering, operational oversight, and continuous enhancement of Northern Trust's privileged access management capabilities. This role partners with Cyber Security Engineering, Infrastructure Services, Application Development, Risk Management, Audit, Compliance, and Business Technology teams to reduce cyber risk associated with privileged accounts, administrative access, elevated entitlements, and non-human identities. The successful candidate will lead the adoption, optimization, and governance of CyberArk PAM capabilities while supporting the broader IAM strategy across workforce, privileged, and machine identities. The role is accountable for ensuring privileged access controls align with regulatory expectations, internal security standards, least privilege principles, and industry frameworks including NIST, FFIEC, and financial services best practices. CyberArk serves as Northern Trust's approved PAM solution for privileged credential management, session monitoring, governance, and audit reporting.

CyberArk Platform Ownership

Serve as a subject matter expert for the CyberArk platform, including:

• Privileged Access Manager (PAM)
• Privileged Session Manager (PSM)
• Central Policy Manager (CPM)
• Application Access Manager (AAM/Secrets Management)
• Endpoint Privilege Management (EPM)
• Privileged Threat Analytics (PTA)

Drive platform upgrades, integrations, onboarding, and operational maturity activities. Develop and maintain standards for privileged account lifecycle management through CyberArk controls. Partner with engineering teams to integrate CyberArk with critical infrastructure, cloud platforms, applications, databases, and automation tooling.

Risk & Control Management

Ensure privileged access controls satisfy Northern Trust security policies, audit requirements, and regulatory obligations. Lead control design and continuous monitoring efforts for privileged identities across workforce and non-human populations. Evaluate privileged access risks, control gaps, policy exceptions, and remediation plans. Support RCSA, audit evidence collection, and regulatory examination activities impacting privileged access management. Implement detective controls and monitoring capabilities for privileged account activities and administrative sessions.

Engineering & Automation

Develop automation and integration capabilities supporting privileged account provisioning, credential rotation, access review, and secrets management. Drive API-based integrations between CyberArk, IGA platforms, ticketing systems, cloud environments, and enterprise applications. Support modernization initiatives involving machine identity management, cloud privilege management, and privileged authorization models. Partner with IAM engineering teams to enhance scalability, reliability, and operational efficiency across PAM services.

Stakeholder Management & Leadership

Provide leadership and strategic direction for PAM engineering and operations teams. Collaborate with infrastructure, cloud, application, and security architects to define privileged access requirements. Present PAM strategy, risk posture, metrics, and roadmap updates to senior leadership, governance forums, and regulators. Influence enterprise technology decisions involving administrative access, privileged credentials, and identity security architectures.

Preferred Qualifications

• 7+ years of experience in IAM, Cyber Security, or PAM-related disciplines.
• Deep experience administering or engineering CyberArk PAM solutions.
• Strong understanding of privileged account governance, credential vaulting, session management, secrets management, and least privilege principles.
• Experience with enterprise IAM capabilities including: Saviynt, Active Directory / Entra ID, Authentication and MFA platforms, Identity Governance & Administration, Non-Human Identity Management.
• Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations.
• Experience supporting audit, risk, compliance, and regulatory examinations within a highly regulated environment.

Work Authorization

Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

Reasonable Accommodation

Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at [e-mail], or alternatively you can discuss your individual requirements with the recruiter you are working with.

About Our Tempe Office

The Northern Trust Tempe office opened in 2015 with 75 employees and now serves over 75 different business functions with more than 700 employees. The team is recognized as a Global Capability Center that delivers exceptional value, quality, expertise and innovation through our diverse talent. Learn more.

Terms and Conditions

Candidate Privacy Notice California Applicant Privacy Notice Pay Transparency Nondiscrimination Provision (U.S) Transparency in Coverage Disclosure – North America Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email our HR Service Center or call 1-800-807-0302 (North America), [phone] (Asia Pacific), 1800-425-0333 (India), [phone] (Europe, Middle East and Africa) and let us know the nature of your request and your contact information.

APAC/INDIA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

Canada EEO STATEMENT

Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected by federal, provincial, or local law, regulation, or ordinance.

EMEA EEO STATEMENT

It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development.

USA EEO STATEMENT

It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status. EEO Know Your Rights (U.S.)