Case Study: TIAA achieves hybrid cloud application security and $800K/year savings with CyberArk

Fortune 100 uses CyberArk Identity Security solutions to improve productivity and protect the interest of millions of investors

TIAA, a century-old financial services organization serving over 5 million customers with $1 trillion in assets under management, was modernizing a hybrid IT estate (including Red Hat OpenShift on Azure and AWS) to speed deployments and lower infrastructure costs. Because of the sensitivity of its business, the move to cloud required a scalable, integrated secrets management and privileged access solution to secure credentials across mission-critical legacy systems and new containerized applications.

TIAA selected CyberArk—deploying Conjur Secrets Manager plus Privileged Access Manager, Credential Providers and Endpoint Privilege Manager—across multi‑cloud and on‑prem environments with centralized audit and support. The deployment now protects 1,200+ applications, 100,000 accounts and 10,000 endpoints, saves about $800K annually versus alternatives, speeds onboarding and deployments, eliminates embedded passwords, reduces downtime with a dual‑account approach, and improves developer productivity through automated credential handling.

TIAA

Adam Powers

Lead Info Security Engineering Manager