Senior CyberArk PAM Engineer

Northern Trust

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
Tempe, AZ
Salary
$108,775–$184,965 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $185k
This role $147k
$96k $232k
below market most similar roles pay here above market

This role pays less than 81% of similar roles. Most pay $152,988–$216,250 — the blue band above. At the midpoint, this role pays about $147k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Northern Trust

Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management

Northern Trust currently has 113 open roles on FindRole.

Listed pay typically runs $114,500–$194,700 across 76 roles with salary data.

Most-posted roles

View all roles at Northern Trust

At a glance

TL;DR · Senior CyberArk PAM Engineer

The Senior CyberArk PAM Engineer joins the PAM Engineering team to lead day-to-day operations and support for the enterprise Privileged Access Management environment. This senior technical role ensures the stability, security, and performance of the CyberArk platform, serving as a primary escalation point for complex issues. Responsibilities include monitoring platform health, performing root-cause analysis, executing maintenance, and managing disaster recovery testing. The engineer will support integrations across Windows, Linux/Unix, databases, and cloud services while developing automation using PowerShell, Python, and REST APIs. Key technical requirements include deep knowledge of Vault, PVWA, CPM, PSM, PTA, AAM, Secrets Manager, and Conjur. The role focuses on solving privileged access, secrets management, and high availability challenges within a complex enterprise infrastructure to maintain reliable security controls.

What you'll do

  • Provide advanced operational support for the CyberArk PAM environment, including Vault, PVWA, CPM, PSM, and Secrets Manager.
  • Monitor platform health, performance, and capacity while proactively identifying and resolving operational alerts.
  • Lead the resolution of complex incidents and perform root-cause analysis to drive long-term technical fixes.
  • Troubleshoot onboarding, authentication, connectivity, password management, and application integration issues.
  • Execute platform maintenance, including configuration changes, upgrades, patching, certificate renewals, and disaster recovery testing.
  • Develop automation using PowerShell, Python, and REST APIs to reduce manual work and improve reliability.
  • Maintain technical documentation, runbooks, and recovery procedures to support risk, audit, and compliance requirements.
  • Serve as a senior escalation point providing technical guidance to team members on PAM operational issues.

What we're looking for

  • Must have 7+ years of hands-on experience with CyberArk or similar vaulting solutions in complex production environments.
  • Must possess deep knowledge of CyberArk technologies including Vault, PVWA, CPM, PSM, safes, platforms, accounts, policies, and access controls.
  • Must have strong troubleshooting experience across Windows, Linux/Unix, Active Directory, networking, certificates, databases, and application connectivity.
  • Must have experience supporting major incidents, root-cause analysis, production changes, upgrades, and disaster recovery or failover testing.
  • Must have experience with PowerShell and automation technologies such as Python or REST APIs.
  • Must have an understanding of privileged access, secrets management, high availability, disaster recovery, and security controls.
  • Must have experience working within structured incident, problem, change, and service-management processes.
  • Work Authorization.

More like this

Similar roles

Lead CyberArk Engineer

Lam Research

Fremont, CA +2 7 days ago $137,000–$287,000
CyberArk Privileged Access Management Secrets Management PKI Certificate Services Zero Trust Machine Identity Security Identity and Access Management Cloud Security Cryptography Disaster Recovery Session Monitoring Credential Rotation JIT Access Platform Engineering
10+ yrs exp Hybrid

Staff/Lead Security Engineer, PAM

CME Group

Chicago, IL 4 days ago $132,100–$220,100
CyberArk Idira Python PowerShell Directory Services Federation Multifactor Authentication (MFA) Windows Linux GCP DevOps Agile Scrum

Senior Associate, Security Engineering

The OCC

Chicago, IL 46 days ago $99,300–$169,600
CyberArk HashiCorp Vault Python GoLang Terraform Ansible Jenkins Active Directory AWS IAM OAuth 2.0 OIDC PKI LDAPS Kerberos Bash PowerShell CI/CD ADCS
Hybrid

Senior Lead IAM Privileged Access Engineering

Northern Trust

Tempe, AZ 42 days ago
CyberArk Identity & Access Management (IAM) Privileged Access Management (PAM) Secrets Management Active Directory Entra ID Saviynt API MFA NIST FFIEC COBIT Identity Governance & Administration Non-Human Identity Management Session Management Credential Vaulting
7+ yrs exp

Associate Principal, Security Engineering

The OCC

Chicago, IL 46 days ago $122,900–$199,500
CyberArk HashiCorp Vault Active Directory PKI Terraform Ansible Jenkins Python GoLang Bash PowerShell AWS IAM OAuth 2.0 OIDC LDAPS Kerberos CI/CD HSMs Security as Code
Hybrid

Associate Principal, Security Engineering

The OCC

Chicago, IL 51 days ago $122,900–$199,500
HashiCorp Vault CyberArk Active Directory Terraform Ansible Python GoLang Bash PowerShell Jenkins CI/CD AWS IAM PKI OAuth 2.0 OIDC Kerberos LDAPS OpenAI Codex Claude Code Gemini CLI
Hybrid