PAM engineer

• Immediate delivery of cloud PAM, CI/CD, and SailPoint/ServiceNow integrationis required
• Delinea and the role requires PowerShell-heavy automation

Below is feedback of Previous candidate for your reference.

PROS:

1. Has Delinea On-Prem Experience

• Demonstratesworking knowledge of Delinea Secret Server (on-prem only).
• Comfortable managing:
• Privileged accounts
• Assets and folders
• Password vaulting and rotation
• Understands operational realities of PAM in legacy environments.

2. Understanding of Core PAM Concepts

• Grasp of:
• Just-In-Time (JIT) access
• Session recordingbut not monitoring
• Understands least privilege and access risk.

3. Has Knowledge of Automation (Python)

• Capable of developing automation scripts in Python.
• Shows comfort with scripting and repeatable Scripts

4. Familiarity with ServiceNow Ticketing (Operational Level)

• Understands how ServiceNow is used for:
• Ticketing
• Approvals
• Operational workflows
• Has experience working alongsideServiceNow processes.

CONS / GAPS

1. Limited or No Delinea Cloud Experience (Major Gap)

No hands-on experience with:

oDelinea Cloud

oCloud tenant configuration

oSaaS PAM operational model

Experience is limited to on-prem PAM only.

2. No Cloud PAM Account Management

• No experience managing privileged access for:
• AWS IAM
• Azure AD / Entra ID
• GCP IAM
• No exposure to cloud service principals, API keys, or cloud-native rotation patterns.

3. No CI/CD or DevOps PAM Experience

• No experience integrating PAM with:
• CI/CD pipelines
• Infrastructure-as-Code
• Runtime secret retrieval
• No exposure to developer workflows.

4. No IGA Integration Experience (SailPoint)

• Has not integrated Delinea with SailPoint.
• No experience with:
• Automated provisioning/deprovisioning
• Identity lifecycle-driven PAM access
• Quarterly Access Reviews (QARs)

5. No ServiceNow or SailPoint API Integration Experience

• Has not built:
• API-based integrations
• Automated approval or fulfillment workflows
• Experience is limited to process awareness, not engineering execution.

6. PowerShell Gap (Notable for Delinea)

• Does not develop automation in PowerShell, which is:
• The primary scripting language for Delinea SDKs
• Heavily used for Windows, AD, and enterprise IAM integrations

7. No SIEM or AI-Driven PAM Experience

• No experience integrating PAM telemetry with:
• SIEM (Splunk, Sentinel, etc.)
• AI / anomaly detection platforms
• Limited exposure to threat-driven PAM analytics.