Delinea PAM Engineer

Key JD Requirements – Delinea PAM Engineer

Skill: PAM Engineer

Experience - 7+ Yrs

Location - Remote

Notice period - Immediate to 15 days Max.

The IAM/PAM Engineer is the central technical resource responsible for the hands-on implementation, configuration, scripting, and maintenance of the Delinea PAM suite. This role translates architectural designs and business requirements into a fully functional, automated, and secure privileged access management environment. This is a hands-on, engineering-heavy role critical to the program's success.

• Strong hands-on Delinea Secret Server – Secret Templates, Folders, Permissions, Dependencies, and application onboarding.
• Production troubleshooting – Heartbeat, password rotation, connectivity and Secret Server issues.
• Delinea DR/HA – SQL backup/restore, Master Encryption Key, Engine Pool failover and DR testing.
• Least Privilege – Delinea Server Suite/Privilege Manager, file/registry policies and application whitelisting.
• Independent problem solving – Should troubleshoot and resolve PAM issues with minimal guidance.
• Automation & Integration – Python/PowerShell, REST APIs, OAuth 2.0 and enterprise IAM integrations.

Key Responsibilities:

• Platform Management:

Install, configure, and maintain new modules in Delinea platform (Secret Server, Privilege Manager, Session Manager, Secure Remote Access).

• Integration & Automation:

Develop and maintain integrations between Delinea and other enterprise systems (e.g., SailPoint for IGA, ServiceNow for ticketing, Splunk for SIEM) using APIs and PowerShell/Python scripts.

• Secrets Vaulting:

Execute the onboarding of privileged accounts, service accounts, API keys, and other secrets into Delinea Secret Server, including configuring and testing automated password rotation.

• Access Control Configuration:

Implement and manage access control policies, roles, and folders within Delinea to enforce least privilege.

• Session Management:

Configure session brokering, monitoring, and recording for RDP, SSH, and web-based connections.

• Operational Support:

Serve as the Tier 3 support escalations point for PAM-related issues, perform routine maintenance, and ensure platform health and performance.

Required Skills & Qualifications:

• 3+ years of hands-on experience implementing and administering Delinea.
• Strong scripting skills (PowerShell, Python) for automation and integration.
• In-depth knowledge of PAM and IAM concepts (provisioning, SSO, RBAC) and integration with IGA tools.
• Solid understanding of Windows and Linux security and administration.
• Experience with network protocols and security concepts (Firewalls, DNS, AD, LDAP).
• Delinea Core Concepts:
• Deep understanding of PAM principles: vaulting, session management, and privilege delegation.
• Knowledge of Delinea's architecture: Secret Server or PAM Essentials components, including the Distributed Engine.
• Understanding of Secret Templates, Folders, and Access Control mechanisms within Delinea.
• Authentication & Authorization:
• OAuth 2.0 / OpenID Connect (OIDC): Skill in configuring OAuth clients in both systems for secure server-to-server communication. This is the preferred modern method.
• Token Management: Handling access tokens, refresh tokens, and API keys securely.

Desirable Skills & Qualifications:

• Knowledge in SailPoint ISC Workflows and the Delinea API/PowerShell SDK.
• Ability to interpret the output of Delinea AI/PAM-I. This includes understanding risk scores, anomaly detection alerts, and behavior-based insights.
• A grasp of concepts like standard deviation, clustering, and classification helps in understanding why a session or secret was flagged as risky.
• Skills in platforms like Azure Logic Apps, AWS Step Functions, or Microsoft Power Automate can be useful as an integration broker, especially for complex, multi-step processes.