Director, Interactive Privileged Access & Endpoint Elevation

Note: Fidelity will not provide immigration sponsorship for this position The Role   The Director, Interactive Privileged Access & Endpoint Elevation leads the enterprise program and platforms for interactive privileged access, credential vaulting, session management, and endpoint/server privilege elevation.  This technical leadership role owns Fidelity's privileged access platforms, including CyberArk, endpoint privilege management solutions, and related privileged access technologies supporting workforce, infrastructure, and operational environments. The role combines people leadership, product ownership, and deep hands-on technical expertise in privileged access management to deliver secure-by-default experiences while meeting regulatory, audit, and risk management requirements. The key responsibilities of the role are:   Lead and develop engineering and product teams delivering enterprise privileged access and endpoint privilege management capabilities.  Own the enterprise platforms, roadmap, delivery, resiliency, and lifecycle management for CyberArk, endpoint privilege management, workforce vault, and related PAM technologies.  Establish clear operating rhythms (standups, planning, retrospectives) and an inclusive, learning-focused engineering culture.  Build scalable onboarding patterns and automation for privileged accounts, endpoints, servers, and workforce access use cases.  Ensure platform hardening, compliance, audit evidence, DR/IR readiness, and continuous risk reduction.  Design and implement least-privilege access models, just-in-time access capabilities, privileged session controls, and command elevation policies.  Automate credential lifecycle management, including vaulting, rotation, reconciliation, session management, and policy enforcement.  Harden PAM platforms using secure configuration standards and implement automated configuration, upgrades, and lifecycle management through Infrastructure as Code.  Enable scalable onboarding and self-service experiences with paved paths and reference implementations for administrators, engineers, and support teams.  Integrate privileged access platforms with enterprise identity, ITSM, workflow, and security monitoring solutions.  Partner with infrastructure, workplace, and application teams to eliminate standing privileged access and modernize enterprise access models.  Drive platform modernization, tool rationalization, and adoption of emerging PAM capabilities across the enterprise.  The Expertise and Skills You Bring   Bachelor's degree in Computer Science, Information Security, Engineering, or related field (Master's preferred).  3+ years direct people leadership experience, including hiring, coaching, performance management, and career development.  Deep hands-on engineering experience implementing and operating CyberArk in large-scale enterprise production environments.  Deep expertise in Privileged Access Management architecture, controls, operational processes, and industry best practices.  Strong hands-on experience with endpoint privilege management platforms such as Delinea, BeyondTrust, or equivalent technologies.  Expertise with CyberArk core components, privileged credential management, session management, privileged workflows, credential rotation, and vault operations.  Strong understanding of Windows and endpoint privilege controls, including LAPS, local administrator management, and least-privilege enforcement.  Experience with Infrastructure as Code, automation, policy-driven controls, and operational engineering practices.  Strong understanding of Zero Trust, identity security, and privileged access governance principles.  Experience leading large-scale PAM deployments, migrations, transformations, and platform modernization initiatives.  Proven ability to influence senior stakeholders and drive strategic outcomes across engineering, infrastructure, security, and risk organizations.  Strong