PAM Engineer

Platform Management: Install, configure, and maintain new modules in Delinea platform (Secret Server, Privilege Manager, Session Manager, Secure Remote Access). Integration & Automation: Develop and maintain integrations between Delinea and other enterprise systems (e.g., SailPoint for IGA, ServiceNow for ticketing, Splunk for SIEM) using APIs and PowerShell/Python scripts. Secrets Vaulting: Execute the onboarding of privileged accounts, service accounts, API keys, and other secrets into Delinea Secret Server, including configuring and testing automated password rotation. Access Control Configuration: Implement and manage access control policies, roles, and folders within Delinea to enforce least privilege. Session Management: Configure session brokering, monitoring, and recording for RDP, SSH, and web-based connections. Operational Support: Serve as the Tier 3 support escalations point for PAM-related issues, perform routine maintenance, and ensure platform health and performance. Required Skills & Qualifications: 3 years of hands-on experience implementing and administering Delinea. Strong scripting skills (PowerShell, Python) for automation and integration. In-depth knowledge of PAM and IAM concepts (provisioning, SSO, RBAC) and integration with IGA tools. Solid understanding of Windows and Linux security and administration. Experience with network protocols and security concepts (Firewalls, DNS, AD, LDAP). Delinea Core Concepts: Deep understanding of PAM principles: vaulting, session management, and privilege delegation. Knowledge of Delinea's architecture: Secret Server or PAM Essentials components, including the Distributed Engine. Understanding of Secret Templates, Folders, and Access Control mechanisms within Delinea. Authentication & Authorization: OAuth 2.0 / OpenID Connect (OIDC): Skill in configuring OAuth clients in both systems for secure server-to-server communication. This is the preferred modern method. Token Management: Handling access tokens, refresh tokens, and API keys securely. Desirable Skills & Qualifications: Knowledge in SailPoint ISC Workflows and the Delinea API/PowerShell SDK. Ability to interpret the output of Delinea AI/PAM-I. This includes understanding risk scores, anomaly detection alerts, and behavior-based insights. A grasp of concepts like standard deviation, clustering, and classification helps in understanding why a session or secret was flagged as risky. Skills in platforms like Azure Logic Apps, AWS Step Functions, or Microsoft Power Automate can be useful as an integration broker, especially for complex, multi-step processes. .