This listing doesn't post a salary. Most similar roles pay
$158,000–$217,500.
Based on 240 similar postings.
Employer
About Northern Trust
Northern Trust is a leading provider of wealth management, asset servicing, asset management, and banking services to corporations, institutions, and high-net-worth individuals. Industry: Financial Services & Asset Management
Northern Trust currently has
47 open roles
on FindRole.
Listed pay typically runs
$114,500–$194,700
across 42 roles with salary data.
Sr Lead - IAM Privileged Access Engineering joins the Identity & Access Management team to lead the strategy, governance, engineering, and operational oversight of privileged access management capabilities. This role focuses on reducing cyber risk associated with privileged accounts, administrative access, and non-human identities by managing the CyberArk PAM platform. Key responsibilities include driving platform upgrades, integrating CyberArk with cloud platforms and databases, developing automation for credential rotation, and ensuring compliance with NIST, FFIEC, and financial services standards. The candidate will utilize tools such as CyberArk (PAM, PSM, CPM, AAM, EPM, PTA), Saviynt, Active Directory, Entra ID, and MFA platforms. This role addresses the critical business problem of securing privileged credentials and managing machine identities within a highly regulated environment while ensuring that all access controls align with least privilege principles and internal security policies.
Serve as the primary subject matter expert for the CyberArk platform including PAM, PSM, CPM, AAM, EPM, and PTA modules.
Drive platform upgrades, integrations, onboarding, and operational maturity activities for privileged access management systems.
Develop and maintain standards for privileged account lifecycle management through established CyberArk controls.
Integrate CyberArk with critical infrastructure, cloud platforms, databases, and automation tooling to secure administrative access.
Ensure privileged access controls comply with internal security policies, audit requirements, and financial regulatory obligations.
Design and monitor detective controls for privileged account activities and non-human identity populations.
Develop automation capabilities for credential rotation, secrets management, and automated provisioning across enterprise systems.
Present PAM strategy, risk posture, and roadmap updates to senior leadership and regulatory bodies.
What we're looking for
Experience with CyberArk PAM solutions is preferred.
7+ years of experience in IAM, Cyber Security, or PAM-related disciplines (preferred).
Strong understanding of privileged account governance, credential vaulting, session management, secrets management, and least privilege principles (preferred).
Experience with enterprise IAM capabilities including Saviynt, Active Directory/Entra ID, MFA platforms, and Identity Governance & Administration (preferred).
Familiarity with NIST 800-53, NIST CSF 2.0, FFIEC guidance, COBIT, and financial services regulatory expectations (preferred).
Experience supporting audit, risk, compliance, and regulatory examinations within a highly regulated environment (preferred).
Identity and Access Management
Microsoft Entra ID
AWS
Active Directory
Zero Trust
PAM
PKI
SAML
OAuth
MFA
ADFS
MIM
LDAP
Kerberos
DNS
Certificate Services
Access Governance