Director, Privileged Access Management

Position Summary ADP is hiring a Director, Privileged Access Management. Locations: Roseland NJ, Alpharetta GA, Pasadena CA, Orlando FL, Miami FL, Norfolk VA. In this role, you will oversee the access, implementation, security, and governance of accounts and privileged accounts. The focus is on operational excellence and risk mitigation through deployment and management of PAM technologies such as CyberArk, Delinea, and Beyond Trust. The leader will secure critical infrastructure and data by enforcing modern access principles such as least privilege, just‑in‑time provisioning, and zero standing privilege, while ensuring secure credential storage, session monitoring, and compliance alignment. The team leader will also contribute to evaluating and optimizing the access management toolset. Key Responsibilities Lead day‑to‑day operations and governance of accounts including privileged accounts across the organization. Define and enforce access‑management policies based on least privilege, zero trust, and zero standing access principles. Manage onboarding, rotation, vaulting, and monitoring of admin, service, application, and other accounts. Administer tools including CyberArk and Beyond Trust to protect sensitive systems and endpoints. Oversee automated credential rotation and discovery of privileged accounts. Implement just‑in‑time access workflows, break‑glass processes, and privileged escalation controls. Ensure privileged session recording and centralized logging. Secure access to high‑risk and business‑critical systems, including cloud console access and remote infrastructure. Lead centralized management of secrets (API keys, encryption keys, credentials) used across applications and DevSecOps environments. Collaborate with SOC and Cybersecurity teams on threat detection and incident response related to access. Work closely with Infrastructure, Cloud Ops, DevSecOps, DBAs, IT Admins, and Application Owners to align privileged access controls with operational needs. Coordinate with audit and compliance teams to ensure regulatory alignment. Manage engagement with PAM vendors and support teams. Support assessment and possible optimization of existing PAM solutions (CyberArk, Delinea, Beyond Trust), identifying overlaps or improvement areas where appropriate. Define a vision, strategy, and migration plan for moving the on‑prem toolset to public Cloud vendors. Handle PAM for on‑prem & public Cloud assets. Define, implement, and operate the use and impact of GenAI within IAM landscape and across the ecosystem. Typical Day Start each day with a scrum, working in a team to understand responsibilities, identify issues, and communicate coding priorities while choosing user stories to complete. Must know Agile well. Spend time leading two‑week sprints, keeping up with timelines and coding standards, and building technically sound tools. Continuously learn new technologies and maintain ability to create best tools for clients. Work with business leadership and project management to understand priorities and create automation accordingly. Present and defend the team’s approach to leadership, partnering across the development organization to turn ideas into reality. Qualifications Bachelor’s degree in computer science, cybersecurity, or a related field; master’s preferred. 10+ years of experience in IT security, including 3+ years focusing on PAM. 5+ years of experience managing technical teams. Experience with DevSecOps toolchains and integrating PAM with CI/CD workflows. Understanding of compliance frameworks such as ISO 27001, NIST, SOX, GDPR. Hands‑on expertise with at least one major PAM platform (CyberArk, Delinea, Beyond Trust), preferably across multiple environments. Working knowledge of privileged account lifecycle, secrets management, session recording, and access provisioning. Familiarity with hybrid cloud infrastructure (AWS, Azure, GCP) and modern access controls. Excellent communication skills and experience interacting with cross‑functional teams, including HR, legal, audit, and business leaders. Able to communicate effectively with both technical teams and senior leadership. Experience managing or mentoring a technical team in a leadership or supervisory role. Program and change management experience. Strategic thinker with a hands‑on technical approach. Strong leadership and mentoring capabilities. Passionate about automation, security, and operational excellence. Self‑driven, organized, and comfortable operating in a hybrid, fast‑paced environment. Analytical and security‑driven mindset with an eye for operational detail. Preferred Certifications Microsoft Certified: Identity and Access Administrator / Azure Solutions Architect Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Identity and Access Manager (CIAM) Certified Cloud Security Professional (CCSP) AWS or Azure Security Certification Certified DevSecOps Professional or equivalent CyberArk Defender/Sentry, Delinea, Beyond Trust or equivalent Benefits Base salary offers may vary based on location, skills, and experience. Some positions may include additional compensation in the form of bonus, equity, or commissions. We offer medical, dental, vision, life insurance, matched retirement savings, wellness program, short‑and long‑term disability, charitable contribution match, holidays, personal days, vacation, paid volunteer time off, and more. Salary range: USD $105,600.00 – $282,600.00 / Year* (actual compensation will not be less than the applicable minimum wage or minimum exempt salary requirement under federal, state and local laws). Diversity, Equity, Inclusion & Equal Employment Opportunity ADP is committed to an inclusive, diverse and equitable workplace, and is further committed to providing equal employment opportunities regardless of any protected characteristic. Hiring decisions are based on ADP’s operating needs, and applicant merit including, but not limited to, qualifications, experience, ability, availability, cooperation, and job performance. #J-18808-Ljbffr ADP