Job Description

At Northwestern Mutual, we are strong, innovative and growing. We invest in our people. We care and make a positive difference.

This candidate will work on team supporting our mission to provide Privileged Access Management and solutions to the organization. This includes integrating with third-party software and on-premises and cloud infrastructure to ensure a seamless user experience, high availability and stay ahead of the needs of the business. This work will require cross-team communication and functions that could also include automation and process improvement efforts. Regularly monitors the security community for, and researching, the latest assessment and exploit methodologies. This work is concluded by sharing the information back to the team in the form of newly written tools and/or attack techniques via informal internal training sessions. This position will work with key business partners, developers, vendors, and security and infrastructure engineers to help support the future of our Privileged Access Management Program. This person will be responsible for architecting, managing, supporting and providing improvements to all aspects PAM tools and their integrations and impact across the enterprise for least privilege and secrets management. Responsible for ensuring integrity, and availability, authentication, and authorization across all identities.

Requirements:

* Bachelor's degree in Cyber Security, Computer Science, Information systems or equivalent work experience in the IT field, with at least a portion of that time in Security related position

* Work experience of 10-15 years in control environments with PAM responsibilities and exposure to multiple technology domains

* Certification in security space desired (CISSP, CCSP, etc).

* Strong problem-solving skills

* Strong documentation, testing and automation skills.

* Strong sense of ownership and the ability to work with a limited set of requirements.

* Ability to explain technical solutions to technical and non-technical teams.

* Strong ability to identify and set security practices.

* Strong ability to align technical needs to business processes.

* Strong ability to prioritize work based on business objectives.

* Strong ability to breakdown work to deliver value incrementally.

* Provides day-to-day leadership and coaching to less experienced engineers

Experience:

* Experience with designing controls, developing policy solutions and procedures that meet corporate standards

* Experience with Privilege Access, least privilege and secrets management across multiple platforms

* Experience with implementation and management of platform(s)

* Experience with designing and architecting a full PAM life-cycle implementation: Build, deploy, manage, enrollment and operationalize

* Developed policies, procedures and standards for PAM including vaulting solutions in IAM practices

* Understanding of risk and appropriate controls needed to mitigate platform/application risk as published under NIST standards

* Ability to design and implement appropriate controls required to secure vaulting solution related to risk as published under NIST standards

* Overall PAM understanding and least privilege as it relates to technology stack

* Service delivery combined with corporate security requirements

* Ability to communicate PAM risks and controls across role levels and organizational domains

* Experience with optimizing and defining efficiency with the domain

* Current with PAM and secret management trends

* Recognized as having expert knowledge across IAM domains

Nice to have-Qualifications:

* Connected with other PAM professionals in the industry

* Experience with CI/CD Pipelines

* Experience preferred with Agile methodologies/DevOps environment.

This job is not covered by the existing Collective Bargaining Agreement.

Required Certifications:

Grow your career with a best-in-class company that puts our clients interests at the center of all we do. Get started now!

We are an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or status as a protected veteran, or any other characteristic protected by law.