Manager II, Identity Access Management – PAM

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead, mentor, and cultivate a team of PAM engineers and analysts, promoting a culture of accountability, innovation, and ongoing improvement.

• Oversee daily operations, prioritize workloads, plan resources, and manage performance.

• Eliminate technical obstacles and offer guidance on intricate engineering challenges and production issues.

• Foster operational excellence through coaching, sharing knowledge, and enhancing processes.

• Define, communicate, and implement the enterprise Privileged Access Management strategy in alignment with cybersecurity and business goals.

• Take ownership of the multi-year PAM roadmap, ensuring a balance between operational stability, security enhancements, reduction of technical debt, and modernization efforts.

• Assess emerging PAM technologies and industry best practices to enhance the program continually.

• Promote the adoption of modern privileged access capabilities, including Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), credential rotation, session monitoring, secrets management, and cloud privileged access.

• Manage multiple concurrent PAM initiatives from the planning phase through to implementation.

• Set project priorities, timelines, risks, and dependencies while ensuring successful outcomes.

• Collaborate with cross-functional technology teams to integrate PAM capabilities into enterprise platforms and applications.

• Deliver regular status updates and executive-level reporting on program health, milestones, risks, and key performance indicators.

• Supervise daily operational support of the enterprise PAM platform, guaranteeing high availability, reliability, and performance.

• Facilitate incident resolution, conduct root cause analysis, and promote continuous service improvement.

• Ensure effective execution of operational procedures, monitoring, maintenance, upgrades, disaster recovery, and lifecycle management.

• Work with engineering teams to automate privileged account onboarding, credential management, and policy enforcement.

• Collaborate with Internal Audit, External Audit, Risk Management, and Regulatory Compliance teams to assist in examinations and assessments.

• Ensure PAM controls are in line with regulatory requirements, industry frameworks, and applicable financial industry standards.

• Develop remediation strategies for audit findings and drive prompt resolution of identified risks.

• Maintain policies, standards, procedures, and technical documentation that support the PAM program.

• Build strong partnerships across Information Security, Infrastructure, Identity & Access Management, Cloud Engineering, DevOps, Architecture, and Application Development teams.

• Present program updates, strategic initiatives, operational metrics, and risk posture to senior leadership and executive stakeholders.

• Influence enterprise security decisions through data-driven recommendations and business-focused communication.

• Act as the primary escalation point for complex privileged access challenges.

• Establish KPIs and operational metrics to evaluate program effectiveness.

• Drive automation and process optimization to enhance operational efficiency.

• Champion continuous improvement initiatives that advance the organization’s privileged access maturity.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent experience.

• 7+ years of experience in cybersecurity or identity and access management.

• 3+ years of leadership experience managing technical engineering teams, or equivalent expertise as a subject matter lead or expert.

• Profound understanding of Privileged Access Management principles, privileged identity governance, and credential security.

• Experience managing enterprise PAM platforms such as CyberArk, Delinea, BeyondTrust, or similar solutions.

• Proven track record of leading enterprise technology implementations and security transformation initiatives.

• Strong understanding of Windows, Linux, Active Directory, Entra ID, cloud platforms, service accounts, APIs, and infrastructure security.

• Familiarity with working in highly regulated environments, preferably within financial services.

• Excellent communication and executive presentation abilities.

• Demonstrated capacity to influence stakeholders at all organizational levels.

• Experience implementing cloud-native PAM and secrets management solutions.

• Knowledge of Zero Trust architecture and Just-in-Time privilege models.

• Experience in securing machine identities, service accounts, and non-human identities.

• Familiarity with DevSecOps, Infrastructure as Code, and automation frameworks.

• Professional certifications such as CISSP, CISM, Security+, CyberArk Defender/Sentry, Azure Security Engineer, or equivalent.

🏝️ Benefits

• Health insurance

• 401(k) matching

• Flexible work hours

• Paid time off

• Remote work options

• Professional development opportunities