Vice President, Privileged Access Management Architect
at Fidelity Investments
Posted 6 days ago
No clicks
- Compensation
- Not specified
- City
- Not specified
- Country
- United States
Currency: Not specified
Design and lead the PAM architecture strategy for Fidelity’s Enterprise Cybersecurity. This role requires deep expertise in workload access controls, secrets management, and frameworks such as SPIFFE and SPIRE. The candidate will have extensive experience with PAM tools including CyberArk, Delinea Secret Server, HashiCorp Vault, and Microsoft Entra ID to ensure security and compliance of the enterprise IT. As an individual contributor with strong leadership and influencing skills, you will drive PAM initiatives and collaborate across the organization.
Job Description:
The Role
The Privileged Access Management (PAM) Architect will be responsible for designing the PAM architecture strategy for Fidelity’s Enterprise Cybersecurity organization. This role demands deep expertise in workload access controls, secrets management, and a solid grasp of frameworks such as SPIFFE and SPIRE. The ideal candidate will possess extensive experience with PAM tools, including CyberArk, Delinea, HashiCorp Vault, and Microsoft Entra ID, ensuring the security and compliance of the organization's IT infrastructure. Although this is an individual contributor role, strong leadership and influencing skills are crucial to drive initiatives and collaborate effectively across the organization.
Develop a comprehensive PAM architecture strategy that aligns with organizational objectives and regulatory requirements.
Lead the design and contribute to the development and deployment of PAM solutions, focusing on workload access controls and secrets management.
Contribute to the implementation and management of secrets management solutions, ensuring the secure storage, access, and rotation of privileged credentials.
Apply frameworks like SPIFFE (Secure Production Identity Framework for Everyone) and SPIRE (SPIFFE Runtime Environment) to establish secure, scalable, and standardized workload identities.
Leverage PAM tools such as CyberArk, Delinea Secret Server, HashiCorp Vault, and Microsoft Entra ID to enhance security measures and streamline access management processes.
Design PAM policies, standards, and procedures to ensure consistent and secure management of privileged accounts. Ensure PAM practices comply with organizational policies and regulatory requirements.
Assess the effectiveness of PAM controls, making data-driven decisions to reduce risk and enhance security posture.
Collaborate with technology and business partners to identify and mitigate risks associated with privileged access.
Stay current with emerging trends and technologies in PAM and cybersecurity driving enhancements to existing solutions.
The Expertise and Skills You Bring
10+ years of experience in defining and delivering cybersecurity architecture, strategies and solutions with demonstrated experience in the financial services industry or other highly regulated sectors.
Bachelor's degree in Information Security, Computer Science, or a related field; a Master's degree is preferred.
Strong industry experience in architecting and designing PAM solutions and deployment across the enterprise.
Deep technical understanding of PAM capabilities, controls and security technologies in areas related to identity and access management to address privilege-based risk.
Familiarity with regulatory requirements related to PAM, such as PCI DSS, HIPAA, or GDPR.
Expertise with build vs. buy solution options.
Working knowledge and experience with Cloud Architectures and the ability to address the security considerations of secure cloud computing including IAM with enterprise services, SSDLC, data protection, cryptography and key management.
Demonstrate leadership and consensus building skills with which you influence decisions and engage across Fidelity and at all levels of the organization
Exceptional communication and interpersonal skills, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.
Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC) are highly desirable.
The Team
The Enterprise Cybersecurity (ECS) organization sets Fidelity’s cybersecurity strategy, policy and standards and is responsible for delivering effective security solutions to ensure customer and enterprise data and assets are protected in a constantly evolving cyber-threat landscape. We focus on Cyber threat reduction, vulnerability elimination, deterrence, incident response, resiliency, and recovery policies and activities. You will work directly with the product management and engineering teams to develop solutions to critical projects and provide strategic roadmaps mentorship to both partner teams within ECS as well as for our business units and Enterprise Infrastructure.
Certifications:
Category:
Information TechnologyMost roles at Fidelity are Hybrid, requiring associates to work onsite every other week (all business days, M-F) in a Fidelity office. This does not apply to Remote or fully Onsite roles.
Please be advised that Fidelity’s business is governed by the provisions of the Securities Exchange Act of 1934, the Investment Advisers Act of 1940, the Investment Company Act of 1940, ERISA, numerous state laws governing securities, investment and retirement-related financial activities and the rules and regulations of numerous self-regulatory organizations, including FINRA, among others. Those laws and regulations may restrict Fidelity from hiring and/or associating with individuals with certain Criminal Histories.
Company overview
At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want! We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experiences. For information about working at Fidelity, visit FidelityCareers.com. Fidelity Investments is an equal opportunity employer. Fidelity will reasonably accommodate applicants with disabilities who need adjustments to complete the application or interview process.
AI Guidelines
Learn about our guidelines for use of AI when applying for a Fidelity job
If you would like to request an accommodation, please contact us at:
Apply
About Fidelity
Join us
At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a Best Place to Work in 2026. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined.
Fidelity's working model blends the best of working offsite with maximizing time together in person to meet associate and business needs. Currently, most hybrid roles require associates to work onsite all business days of one assigned week per four-week period (beginning in September 2024, the requirement will be two full assigned weeks).
We invite you to Find Your Fidelity at fidelitycareers.com.
Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging.
Fidelity will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, contact the HR Accommodation Team by sending an email to accommodations@fmr.com, or by calling 800-835-5099, prompt 2, option 3.
At Fidelity, we value honesty, integrity, and the safety of our associates and customers within a heavily regulated industry. Certain roles may require candidates to go through a preliminary credit check during the screening process. Candidates who are presented with a Fidelity offer will need to go through a background investigation and may be asked to provide additional documentation as requested. This investigation includes but is not limited to a criminal, civil litigations and regulatory review, employment, education, and credit review (role dependent). These investigations will account for 7 years or more of history, depending on the role. Where permitted by federal or state law, Fidelity will also conduct a pre-employment drug screen, which will review for the following substances: Amphetamines, THC (marijuana), cocaine, opiates, phencyclidine.
Benefits that adapt to everything life sends your way
401(k) with company match
Medical, dental, vision and prescription drug coverage
16-week maternity leave & 12-week parental leave
Student loan assistance
Fidelity is invested in you
Committed to Professional Development
At Fidelity, we are constantly adapting to the changing needs of our customers, new technologies, and better ways of working. And we empower our employees to do the same, with an emphasis on developing skills and connections that will help propel you forward in your career while being able to make an impact for Fidelity’s customers around the world.
We offer a wide range of options for professional development including online, in-person, and mentor driven solutions. Special interest and networking groups are also part of our culture of empowerment, personal and professional enrichment, diversity and inclusion, and knowledge sharing.
Continuing Education & Training
- Assess, build, and align your development plan through resources like our skill-building classroom and online courses.
- Video-based training for technology, leadership, management & more.
- Ongoing skills development and coaching opportunities.
- Paid training with a facilitator who is dedicated to your onboarding and will track and evaluate your progress, giving you strategies to improve.
- A range of talent development programs to support career mobility.
Mentoring
- Utilize the skills of experienced leaders to enrich your career.
- Dedicated mentors to help you grow into new areas of Fidelity’s business as you develop new skills.
- An open atmosphere of knowledge sharing and collaboration.
- Opportunities to pay it forward, sharing the knowledge you develop and as you help others define how they want their career to take shape.
Our Commitment
Discover opportunities to build a fulfilling career within a supportive culture that celebrates individuality. We empower our associates to pursue career paths that align with their unique goals and personalities.
Giving back to our communities
Throughout Fidelity, you’ll find a genuine commitment to social responsibility – where we strive to make an impact for customers, while also making an impact on the world.
Fidelity Cares
- Provides associates with opportunities to actively volunteer and share their talents.
- Hosts numerous company-wide volunteer events (in-person and virtual).
- Partners with nonprofit organizations to support our local communities.
- More than 12,500 associates donate time annually – from interns to SVPs.
- Impact includes refurbishing schools, donating books and supplies, and teaching financial literacy.
Fidelity Charitable®
- Created to make it easy for people to support charitable organizations they care about.
- Helped deliver $14.9billion in donor-recommended grants to charity in 2024.
- Supported more than 433,000 unique charities around the world.
- Since its inception, more than $100 billion has been given to public charities.
Technology careers at Fidelity
Imagine and create the next generation of financial products and tools.
