Staff Lead Security Engineer, PAM

CME Group

Confirmed live 2 days ago High trust

Quick summary

Work type
On-site
Location
Chicago, IL
Salary
$132,100–$220,100 / yr
Posted
23 days ago
Freshness
Confirmed live 2 days ago

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $184k
This role $176k
$121k most similar roles pay here $236k

This role pays less than 52% of similar roles. Most pay $155,000–$213,812 — the shaded band above. At the midpoint, this role pays about $176k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About CME Group

CME Group operates the world''s largest financial derivatives marketplace, offering futures and options products across interest rates, equity indexes, foreign exchange, energy, agricultural products, and metals. Industry: Financial Exchanges & Derivatives

CME Group currently has 8 open roles on FindRole.

Listed pay typically runs $128,950–$214,850 across 8 roles with salary data.

Most-posted roles

View all roles at CME Group

At a glance

TL;DR · Staff Lead Security Engineer, PAM

Staff/Lead Security Engineer - PAM The Staff/Lead Security Engineer - PAM joins the security team to drive the evolution of the Privileged Account Management program. This role involves designing, implementing, and supporting highly automated solutions while identifying coverage gaps and leading remediation efforts. The engineer will manage account inventory, develop technical documentation, and provide mentorship to junior staff. Key responsibilities include managing infrastructure improvements for CyberArk/Idira ISPSS and Privileged Cloud, alongside supporting IAM technologies like directory services, federation, multifactor authentication, and identity lifecycle management. Required skills include expertise in Windows and Linux environments, proficiency in PowerShell or Python scripting, and familiarity with DevOps and containerized workloads. The role addresses the critical challenge of securing privileged access and ensuring compliance through robust identity visibility and intelligence within a complex technical infrastructure.

What you'll do

  • Lead the design, implementation, and support of highly automated and reliable Privileged Access Management (PAM) solutions.
  • Identify gaps in existing PAM coverage and lead remediation efforts through technical design and engineering.
  • Support IAM technologies including directory services, federation, multi-factor authentication, and identity lifecycle management.
  • Research emerging security trends and perform product evaluations to evolve the organization's infrastructure.
  • Develop project roadmaps, plans, and documentation for PAM and broader Identity and Access Management initiatives.
  • Provide advanced incident troubleshooting, participate in on-call rotations, and conduct disaster recovery tests.
  • Proactively identify and automate manual tasks using scripting languages like PowerShell or Python.
  • Mentor junior staff and provide guidance to internal teams regarding credential storage and usage.

What we're looking for

  • Must have 7+ years of proven experience with CyberArk/Idira.
  • Must have hands-on experience designing, deploying, and supporting large-scale CyberArk/Idira implementations.
  • Must possess expertise in both Windows and Linux environments.
  • Ability to create scripts in either PowerShell or Python.
  • Bachelor's or Master's degree in Computer Science or Information Systems or equivalent combination of education and experience.
  • Familiarity or expertise in cloud technologies and platforms (preferred).
  • CyberArk/Idira certifications or equivalent experience (preferred).
  • GCP or similar cloud certifications (preferred); CISP or equivalent (preferred).

More like this

Similar roles

Senior Security Engineer I, IAM

Oscar Health

New York, NY 56 days ago
Okta Google Workspace Identity AWS BigQuery SAML OAuth OIDC SCIM LDAP IAM SIEM SOAR UEBA ITDR
4+ yrs exp Hybrid

Senior Security IAM Engineer

Adobe

Seattle, WA +2 18 days ago $214,100$310,100
Entra ID Active Directory Okta LDAP 389DS Python PowerShell SaaS Security Posture Management Grafana Splunk PowerBI Public Key Infrastructure MFA Zero Trust Linux Unix Windows Mac

Privileged Access Management Manager

Pacific Life

Newport Beach, CA +1 18 days ago $152,010$185,790
CyberArk Delinea Netwrix Identity and Access Management (IAM) Privileged Access Management (PAM) Active Directory Entra ID Azure Windows Linux Agile ISO NIST Information Security Risk Management Governance Security Controls
5+ yrs exp

Staff Security Engineer, IAM

GitLab

Remote (Canada) 11 days ago $168,000$238,000
IAM Okta Terraform OpenTofu Pulumi Python GCP AWS infrastructure-as-code SCIM zero-trust SaaS FedRAMP SOC2 SOX Identity Governance Cloud Run Anthropic Claude
Remote

Staff Security Engineer

Micron Technology

Boise, ID 21 days ago
DLP Data Classification Azure AWS GCP Python PowerShell Splunk SIEM SOAR Machine Learning UiPath Copilot Studio SharePoint Regex SaaS Automation
5+ yrs exp