Senior CyberArk PAM Engineer

Senior CyberArk PAM Engineer

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world’s most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

About the Role

We’re looking for an experienced CyberArk professional to help lead the day-to-day operations and support of our enterprise Privileged Access Management environment.

In this senior technical role, you’ll be responsible for the stability, security, and performance of the CyberArk platform, acting as a senior escalation point for complex issues and helping ensure privileged access services remain reliable and resilient.

You’ll work closely with PAM Engineering, Architecture, Infrastructure, Application, and Security teams to resolve issues, improve the platform, automate operational activities, and strengthen our overall PAM capabilities.

What You’ll Do

• Provide advanced operational support across the CyberArk PAM environment, including Vault, PVWA, CPM, PSM, PSM for SSH, PTA, AAM, Secrets Manager, and Conjur.

• Monitor platform health, performance, capacity, availability, and operational alerts, proactively identifying and resolving potential issues.

• Lead the resolution of complex incidents and recurring problems, performing root-cause analysis and driving long-term fixes.

• Troubleshoot CyberArk onboarding, authentication, connectivity, password management, privileged sessions, and application integration issues.

• Execute platform maintenance, configuration changes, upgrades, patching, certificate renewals, and disaster recovery testing.

• Support integrations across Windows, Linux/Unix, applications, databases, network devices, cloud services, and other enterprise technologies.

• Develop automation using tools such as PowerShell, Python, and REST APIs to reduce manual work and improve operational reliability.

• Maintain technical documentation, runbooks, recovery procedures, and evidence supporting risk, audit, and compliance requirements.

• Partner with Engineering and other technology teams to continuously improve the CyberArk service.

• Provide technical guidance to other team members and serve as a senior escalation point for PAM operational issues.

• What You’ll Bring

• 7+ years of hands-on CyberArk or similar vaulting solutions experience, including significant experience supporting complex production environments.

• Deep knowledge of CyberArk technologies including Vault, PVWA, CPM, PSM, safes, platforms, accounts, policies, and access controls.

• Strong troubleshooting experience across Windows, Linux/Unix, Active Directory, networking, certificates, databases, and application connectivity.

• Experience supporting major incidents, root-cause analysis, production changes, upgrades, and disaster recovery or failover testing.

• Experience with PowerShell and additional automation technologies such as Python or REST APIs.

• Understanding of privileged access, secrets management, high availability, disaster recovery, and security controls.

• Strong communication and stakeholder-management skills with the ability to lead resolution of complex technical issues.

• Experience working within structured incident, problem, change, and service-management processes.

• Preferred

• 12+ years of broader technology, cybersecurity, identity, or infrastructure experience.

• Experience with cloud and secrets-management technologies, including Microsoft Azure.

• Experience supporting CyberArk integrations across a large, complex enterprise environment.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent professional experience.

Salary Range:

• $108,775 - 184,965 USD

• Salary range is a good faith estimate of base pay. Northern Trust provides a comprehensive benefits package including retirement benefits (401k and pension), health and welfare benefits (medical, dental, vision, spending accounts and disability), paid time off, parental and caregiver leave, life & accident insurance, and other voluntary and well-being benefits. Northern Trust also provides a discretionary bonus program that may include an equity component.

• Work Authorization

• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Northern Trust will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).

• Working with Us

• As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve.

• Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities.

• Reasonable Accommodation

• Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please discuss your individual requirements with the recruiter you are working with.