Senior Privileged Access Management Specialist, Technology

POINT72, L.P.
New York, NY, United States
27 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$140,000.0 - $200,000.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Active Directory Application Programming Interfaces (APIs) Artificial Intelligence Cloud Computing Cloud Computing Security Cyber Security Information Systems Multi-Factor Authentication Identity and Access Management Kerberos (Protocol) Key Management
+13 more
Lightweight Directory Access Protocols (LDAP) Linux System Administration OAuth PCI Data Security Standards Role-Based Access Control Openid Connect Azure Active Directory Security Assertion Markup Language (SAML) Session Management Scripting Cyberark Information Technology SailPoint

Job description

  • Lead the implementation, adoption, and continuous improvement of our enterprise privileged access management program to protect critical systems and sensitive access paths
  • Develop and maintain privileged access policies, standards, governance processes, and operating procedures aligned with industry best practices and regulatory expectations
  • Partner with infrastructure, security, cloud, application, and engineering teams to onboard applications, privileged accounts, service accounts, and systems into the platform
  • Apply least privilege, segregation of duties, and risk-based access principles across privileged access workflows and control remediation efforts
  • Lead privileged access certification campaigns and audit responses by validating access rights, producing evidence, and remediating findings
  • Monitor operational health, security posture, and program effectiveness through performance indicators, risk indicators, dashboards, trend analysis, and management reporting
  • Automate manual processes using scripting, application programming interfaces, workflow automation, and targeted process improvements to reduce risk and improve efficiency
  • Use enterprise-approved artificial intelligence (AI) tools to accelerate analysis, streamline documentation, support troubleshooting, and improve decisions while validating generated outputs
  • Integrate privileged access controls with identity governance, directory services, cloud security, infrastructure, audit, and risk processes across the enterprise
  • Mentor team members and evaluate emerging capabilities to continuously mature the privileged access program

Requirements

  • 8-10 years of experience in information security, with a strong focus on identity and access management and privileged access management
  • Bachelor’s degree in computer science, information systems, cybersecurity, or a related field, or equivalent practical experience
  • Strong knowledge of privileged account lifecycle management, credential vaulting, privileged session management, least privilege, privileged elevation, and secrets management
  • Hands-on experience with enterprise privileged access management solutions, such as CyberArk, BeyondTrust, Delinea, Microsoft Entra PIM, or similar technologies
  • Experience with identity governance and administration platforms, such as SailPoint Identity Security Cloud, IdentityIQ, Saviynt, or similar technologies
  • Strong understanding of Active Directory, Microsoft Entra ID, Windows and Linux administration, enterprise authentication technologies, and authorization protocols, such as LDAP, Kerberos, SAML, OAuth, OpenID Connect, and multifactor authentication
  • Knowledge of regulatory and security frameworks, such as SOX, ISO 27001, NIST, PCI DSS, or similar compliance standards
  • Experience using data, operational metrics, dashboards, and enterprise-approved artificial intelligence tools to identify trends, improve documentation, enhance analysis, and validate generated outputs
  • Strong analytical, troubleshooting, communication, and stakeholder management skills, with demonstrated ability to resolve complex access issues and lead cross-functional technology and process adoption
  • Commitment to the highest ethical standards

Benefits & conditions

3.63.6 out of 5 stars 55 Hudson Yards 10th FL, New York, NY 10001 $140,000 - $200,000 a year, Pulled from the full job description

  • Tuition reimbursement
  • Parental leave
  • Health insurance
  • 401(k) matching
  • Family leave
  • Matching gift program, We invest in our people, their careers, their health, and their well-being. When you work here, we provide:
  • Fully-paid health care benefits
  • Generous parental and family leave policies
  • Mental and physical wellness programs
  • Volunteer opportunities
  • Non-profit matching gift program
  • Support for employee-led affinity groups representing women, minorities and the LGBT+ community
  • Tuition assistance
  • A 401(k) savings program with an employer match and more, The annual base salary range for this role is $140,000-$200,000 (USD) , which does not include discretionary bonus compensation or our comprehensive benefits package. Actual compensation offered to the successful candidate may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level, among other things.

About the company

As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications.

As a member of Point72’s Technology team, we encourage and support your professional development from day one-helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity-all while delivering real business impact for our multi-billion-dollar global business., Point72 is a leading global alternative investment firm led by Steven A. Cohen. Building on more than 30 years of investing experience, Point72 seeks to deliver superior returns for its investors through fundamental and systematic investing strategies across asset classes and geographies. We aim to attract and retain the industry’s brightest talent by cultivating an investor-led culture and committing to our people’s long-term growth. For more information, visit https://point72.com/.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · World Congress 2023

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · World Congress 2026 Europe

2:14 min

Securing analysis platforms via network access controls

Jennifer Reif · LIVE

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

46 sec

Brokering third-party APIs with OAuth federation

Deepu Deepu · World Congress 2025

Videos

See all

Related articles

See all