Manager II, Identity Access Management – PAM

Navy Federal Credit Union

Manager II leading day-to-day operations and strategic direction of PAM program at Navy Federal Credit Union. Overseeing a team securing privileged identities and access across platforms while ensuring compliance.

Posted 7/22/2026full-timeRemote • 🇺🇸 United StatesSeniorLead💰 $160,400 - $224,550 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Privileged Access Management, leading technical teams, and implementing security transformation initiatives. Proficient in managing enterprise PAM platforms and aligning operational strategies with regulatory compliance and cybersecurity objectives.

Highest-signal resume keywords

Privileged Access ManagementCyberArk, Delinea, BeyondTrustCloud-Native PAM SolutionsPeople LeadershipRegulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privileged Identity GovernanceCredential SecurityWindowsLinuxActive DirectoryEntra IDAPIsInfrastructure SecurityZero Trust ArchitectureJust-in-Time Privilege Models

Soft Skills

Excellent CommunicationExecutive PresentationStakeholder Influence

Tools & Technologies

CyberArkDelineaBeyondTrustCloud PlatformsDevSecOpsInfrastructure as CodeAutomation Frameworks

Certifications & Qualifications

CISSPCISMSecurity+CyberArk Defender/SentryAzure Security Engineer

Industry Keywords

CybersecurityIdentity and Access ManagementFinancial ServicesRegulated EnvironmentsOperational Excellence

Tech Stack

Tools & technologies

AzureCloudCyber SecurityLinux

About the role

Key responsibilities & impact

Lead, mentor, and develop a team of PAM engineers and analysts, fostering a culture of accountability, innovation, and continuous improvement.
Manage day-to-day operations, workload prioritization, resource planning, and performance management.
Remove technical roadblocks and provide guidance on complex engineering challenges and production issues.
Promote operational excellence through coaching, knowledge sharing, and process improvements.
Define, communicate, and execute the enterprise Privileged Access Management strategy aligned with cybersecurity and business objectives.
Own the multi-year PAM roadmap, balancing operational stability, security enhancements, technical debt reduction, and modernization initiatives.
Evaluate emerging PAM technologies and industry best practices to continuously improve the program.
Drive adoption of modern privileged access capabilities including Just-in-Time (JIT) access, Zero Standing Privileges (ZSP), credential rotation, session monitoring, secrets management, and cloud privileged access.
Lead multiple concurrent PAM initiatives from planning through implementation.
Establish project priorities, timelines, risks, and dependencies while ensuring successful delivery.
Partner with cross-functional technology teams to integrate PAM capabilities into enterprise platforms and applications.
Provide regular status updates and executive-level reporting on program health, milestones, risks, and key metrics.
Oversee daily operational support of the enterprise PAM platform, ensuring high availability, reliability, and performance.
Drive incident resolution, root cause analysis, and continuous service improvement.
Ensure operational procedures, monitoring, maintenance, upgrades, disaster recovery, and lifecycle management are effectively executed.
Collaborate with engineering teams to automate privileged account onboarding, credential management, and policy enforcement.
Partner with Internal Audit, External Audit, Risk Management, and Regulatory Compliance teams to support examinations and assessments.
Ensure PAM controls align with regulatory requirements and industry frameworks, and other applicable financial industry standards.
Develop remediation plans for audit findings and drive timely closure of identified risks.
Maintain policies, standards, procedures, and technical documentation supporting the PAM program.
Build strong partnerships across Information Security, Infrastructure, Identity & Access Management, Cloud Engineering, DevOps, Architecture, and Application Development teams.
Present program updates, strategic initiatives, operational metrics, and risk posture to senior leadership and executive stakeholders.
Influence enterprise security decisions through data-driven recommendations and business-focused communication.
Serve as the primary escalation point for complex privileged access issues.
Establish KPIs and operational metrics to measure program effectiveness.
Drive automation and process optimization to improve operational efficiency.
Champion continuous improvement initiatives that strengthen the organization’s privileged access maturity.

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Security, Information Technology, or related field, or equivalent experience.
7+ years of cybersecurity or identity and access management experience.
3+ years of people leadership experience managing technical engineering teams, or equivalent experience as the subject matter lead or expert in area of expertise.
Deep understanding of Privileged Access Management principles, privileged identity governance, and credential security.
Experience managing enterprise PAM platforms such as CyberArk, Delinea, BeyondTrust, or similar solutions.
Experience leading enterprise technology implementations and security transformation initiatives.
Strong understanding of Windows, Linux, Active Directory, Entra ID, cloud platforms, service accounts, APIs, and infrastructure security.
Experience working within highly regulated environments, preferably financial services.
Excellent communication and executive presentation skills.
Demonstrated ability to influence stakeholders across all organizational levels.
Experience implementing cloud-native PAM and secrets management solutions.
Knowledge of Zero Trust architecture and Just-in-Time privilege models.
Experience securing machine identities, service accounts, and non-human identities.
Familiarity with DevSecOps, Infrastructure as Code, and automation frameworks.
Professional certifications such as CISSP, CISM, Security+, CyberArk Defender/Sentry, Azure Security Engineer, or equivalent.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options
Professional development opportunities