Staff/Lead Security Engineer, PAM

CME Group

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$132,100–$220,100 / yr
Employment
Full-time
Posted
69 days ago
Freshness
Confirmed live today
Nearby
99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $186k
This role $176k
$120k $247k
below market most similar roles pay here above market

This role pays less than 60% of similar roles. Most pay $156,200–$216,065 — the blue band above. At the midpoint, this role pays about $176k versus about $186k for comparable roles.

Based on 240 similar postings.

Employer

About CME Group

CME Group operates the world''s largest financial derivatives marketplace, offering futures and options products across interest rates, equity indexes, foreign exchange, energy, agricultural products, and metals. Industry: Financial Exchanges & Derivatives

CME Group currently has 9 open roles on FindRole.

Listed pay typically runs $120,088–$196,300 across 8 roles with salary data.

Most-posted roles

View all roles at CME Group

At a glance

TL;DR · Staff/Lead Security Engineer, PAM

Role Posting Log in to save

The Staff/Lead Security Engineer will join the team to drive the evolution of the Privileged Account Management program. This role involves designing, implementing, and supporting highly automated PAM solutions while identifying coverage gaps and leading remediation efforts. The engineer will manage account inventories, provide incident troubleshooting, and support broader IAM technologies including directory services, federation, multifactor authentication, and identity lifecycle management. Key technical requirements include 7+ years of experience with CyberArk/Idira, proficiency in Windows and Linux environments, and the ability to create scripts using PowerShell or Python. Candidates should also possess familiarity with cloud platforms, containerized workloads, and devops tools. The position focuses on solving complex identity and access management security issues through robust engineering, documentation, and cross-functional leadership within an Agile framework.

Skills

CyberArk Idira Python PowerShell Directory Services Federation Multifactor Authentication (MFA) Windows Linux GCP DevOps Agile Scrum

What you'll do

  • Lead the design, implementation, and support of highly automated and reliable PAM solutions.
  • Identify gaps in existing PAM coverage and lead remediation efforts to improve compliance.
  • Research emerging security trends and perform product evaluations for the IAM space.
  • Produce and contribute to roadmaps and project plans for PAM and larger IAM efforts.
  • Provide advanced incident troubleshooting and participate in on-call rotations and disaster recovery tests.
  • Proactively identify and automate existing manual tasks to improve operational efficiency.
  • Develop processes, guidelines, and documentation for consumption by internal teams.
  • Support IAM-related technologies including directory services, federation, MFA, and identity lifecycle management.

What we're looking for

  • 7+ years of proven experience with CyberArk/Idira.
  • Hands-on experience designing, deploying, and supporting large-scale CyberArk/Idira implementations.
  • Strong familiarity with directory services, identity lifecycle management, federation, MFA, or identity visibility and intelligence.
  • Expertise in both Windows and Linux environments.
  • Ability to create scripts in either PowerShell or Python.
  • Bachelor's or Master's degree in Computer Science or Information Systems or equivalent combination of education and related work experience.
  • CyberArk/Idira certifications or equivalent experience.
  • GCP or similar cloud certifications (preferred); CISSP or equivalent (preferred).

Related searches

More Staff jobs Staff jobs in Chicago All jobs at CME Group

More like this

Similar roles

IdAM Privileged Access Management Engineer II

Pacific Life

Newport Beach, CA +1 18 days ago $137,610–$168,190
Privileged Access Management (PAM) Identity and Access Management (IAM) CyberArk Delinea Netwrix Active Directory Entra ID Azure Windows Linux API Zero Trust Multi-Factor Authentication Agile ISO NIST Databases Networking
5+ yrs exp Hybrid
Save

IdAM Privileged Access Management Engineer Consultant

Pacific Life

Newport Beach, CA 18 days ago $167,670–$204,930
Privileged Access Management (PAM) Identity and Access Management (IAM) CyberArk Delinea Netwrix Active Directory Entra ID Azure Windows Linux API Zero Trust Multi-Factor Authentication Agile ISO NIST Databases Networking
10+ yrs exp Hybrid
Save

Staff Security Engineer, PAM and Agentic Identity

Nvidia

Santa Clara, CA 47 days ago $168,000–$270,250
Privileged Access Management (PAM) Non-Human Identity (NHI) IAM SRE Kubernetes CI/CD HashiCorp Vault CyberArk Teleport Azure PIM Linux Windows APIs Policy-as-Code Monitoring Incident Response LLM
8+ yrs exp
Save

Staff Security Engineer

Uber

Seattle, WA 8 days ago
EDR XDR Zero Trust SASE ZTNA Python Golang Java C/C++ Endpoint Security Infrastructure Security System Hardening Data Loss Prevention SaaS Security AI/ML Automation macOS Windows Linux
7+ yrs exp Hybrid
Save

Staff Security Engineer

Micron Technology

Boise, ID 22 days ago
Data Loss Prevention (DLP) Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio Azure AI Foundry AWS Bedrock SharePoint Regex Networking Operating Systems
5+ yrs exp
Save

Staff Security Engineer

Intuit

Mountain View, CA 54 days ago $207,000–$280,000
Kubernetes Terraform Golang Java CI/CD AWS Google Cloud Platform Azure Helm DevSecOps SRE IAM Applied Cryptography PKI Configuration Management Network Security Vulnerability Management Detection & Response Engineering Serverless Architecture
10+ yrs exp
Save