{"id":81899,"url":"https://alion.io/job/cmegroup-stafflead-security-engineer-pam","title":"Staff/Lead Security Engineer - PAM","company":{"id":33863,"name":"CME Group","domain":"cmegroup.com","url":"https://alion.io/company/cmegroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":5,"ghost_share":0,"stale_share":0.4,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":132100,"max":220100,"currency":"USD","period":"year","gross":null,"usd_annual":220100},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CyberArk","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Scrum","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-19T00:00:00Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-23T14:48:40Z","board_verified":true,"closed_at":null,"days_open":66,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":66},"description":"The primary responsibility of the Staff/Lead Security Engineer position will be the continued evolution and advancement of our Privileged Account Management (PAM) program. This includes improvements in both infrastructure, such as driving the adoption of CyberArk/Idira ISPSS and Privileged Cloud, and working to identify opportunities to increase compliance with our standards through better management and usage of our account inventory. This is a multifaceted position that requires engineering, support and project leadership abilities.\nAdditionally, the position will be involved in the support of other IAM-related technologies such as directory services, federation, multifactor authentication (MFA), identity lifecycle management, and identity visibility and intelligence. As this space is constantly evolving, a passion for technology and a strong focus on continued learning will be key to success.\nPosition Responsibilities:\nLead the design, implementation, and support of highly automated and reliable PAM solutions\n\nIdentify gaps in existing PAM coverage, design solutions and lead remediation efforts\n\nResearch emerging trends and tools and perform product evaluations\n\nProduce and contribute to roadmaps and project plans for PAM or larger IAM efforts\n\nProvide advanced incident troubleshooting and participate in on-call rotation and disaster recovery tests\n\nProactively identify and automate existing manual tasks\n\nDevelop processes, guidelines and documentation for consumption by internal teams\n\nAssist teams in identifying, properly storing and using their credentials\n\nProvide guidance and mentorship for junior staff\n\nMinimum Requirements: Knowledge, skills, and abilities:\n7+ years of proven experience with CyberArk/Idira\n\nHands-on experience designing, deploying and supporting large-scale CyberArk/Idira implementations\n\nStrong familiarity with one or more of the following IAM areas:\nDirectory services\n\nIdentity lifecycle management\n\nFederation / MFA\n\nIdentity Visibility and Intelligence\n\nExpertise in both Windows and Linux environments\n\nFamiliarity or expertise in cloud technologies and platforms a plus\n\nAbility to create scripts in either PowerShell or Python\n\nFamiliarity with devops, containerized workloads and associated tooling and technologies a plus\n\nStrong familiarity with security issues surrounding Identity and Access Management and experience in implementation of security systems and controls\n\nThorough knowledge of information security components, principles, practices, and procedures\n\nDemonstrated ability to work across a broad range of technologies\n\nAbility to succinctly articulate complex technical issues to both technicians and business sponsors\n\nKnowledge of audit controls and applicability to IAM services architecture, design, and processes\n\nExperience working in an Agile/Scrum and the Product Operating Model\n\nPersonal Attributes:\nStrong analytical, problem-solving and troubleshooting skills\n\nHigh level critical thinking skills\n\nExcellent written and oral communication skills\n\nAbility to compose and present material that communicates difficult concepts\n\nPositive attitude, self-starter with strong communication and interpersonal skills to lead working groups, negotiate and create consensus\n\nComfortable working in a dynamic environment with multiple goals\n\nHighly self-motivated and directed, with keen attention to detail\n\nAble to prioritize and execute tasks in a high-pressure environment\n\nAbility to deal diplomatically and effectively at all levels of the organization including both technical and non-technical, management and senior leadership\n\n Education & Certification\nA Bachelor's or Master's degree in Computer Science or Information Systems or equivalent combination of education and related work experience\n\nCyberArk/Idira certifications or equivalent experience\n\nGCP or similar cloud certifications a plus\n\nSecurity certifications: CISSP or equivalent a plus\n\nCME Group is committed to offering a competitive total rewards package for our employees that recognizes their contributions to the business and reflects our long-term investment in their future. The pay range for this role is $132,100-$220,100. Actual salary offered will be dependent on a wide array of factors including but not limited to: relevant experience, skills, education and comparison to internal employees (where relevant). Our compensation program also includes an annual target bonus opportunity for all employees, as well as the opportunity to become an owner in the company through our broad-based equity program. Through our benefits program, we strive to offer flexibility, value and choice. From comprehensive health coverage, to a retirement package that includes both a 401(k) and an active pension plan, to highly competitive education reimbursement provisions, paid time off and a mental health benefit, CME Group offers a holistic benefits package for our team and their dependents.CME Group: Where Futures are Made\nCME Group is the world’s leading derivatives marketplace. But who we are goes deeper than that. Here, you can impact markets worldwide. Transform industries. And build a career by shaping tomorrow. We invest in your success and you own it - all while working alongside a team of leading experts who inspire you in ways big and small. Problem solvers, difference makers, trailblazers. Those are our people. And we’re looking for more.\nAt CME Group, we embrace our employees' unique experiences and skills to ensure that everyone’s perspectives are acknowledged and valued. As an equal-opportunity employer, we consider all potential employees without regard to any protected characteristic.\nImportant Notice: Recruitment fraud is on the rise, with scammers using misleading promises of job offers and interviews to solicit money and personal information from job seekers. CME Group adheres to established procedures designed to maintain trust, confidence and security throughout our recruitment process. Learn more here.","description_format":"text","description_chars":6004,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Marketplaces"],"lifecycle":[{"event":"open","at":"2026-08-19T00:00:00Z"}],"visa":[],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.655,"p_room":0.28,"age_days":66,"expected_fill_days":33,"reasons":["conf:15","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":220100,"is_top_pay":true},"html_url":"https://alion.io/job/cmegroup-stafflead-security-engineer-pam","json_url":"https://alion.io/job/cmegroup-stafflead-security-engineer-pam.json","meta":{"generated_at":"2026-10-24T22:14:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32574,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":33863},"rest":"https://alion.io/mcp/rest/get_company?id=33863"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcmegroup-stafflead-security-engineer-pam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcmegroup-stafflead-security-engineer-pam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcmegroup-stafflead-security-engineer-pam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cmegroup-stafflead-security-engineer-pam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcmegroup-stafflead-security-engineer-pam"}]}