L3 PAM & HashiCorp SME (Delinea, Vault, Terraform)

Employment Eligibility Statement
Due to specific project and client requirements, this position is open to U.S. Citizens and U.S. Lawful Permanent Residents (s) . Sponsorship is not available at this time.

Danta Technologies evaluates all candidates in compliance with the Immigration and Nationality Act (INA) and EEOC guidelines . All hiring decisions are made without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other protected characteristic.


Note:
The position is open for candidates based in San Francisco, CA and Frisco, TX or New Jersey.

Role Summary

We are seeking a highly skilled L3 SME with deep expertise in Delinea Privileged Access Management (PAM) solutions and the HashiCorp product suite (Terraform, Vault, Consul, Nomad). The candidate will serve as the highest technical escalation point, drive solution architecture, perform complex deployments, troubleshoot advanced issues, and guide customers on best practices for secure, scalable PAM and cloud‐infrastructure automation.

Key Responsibilities:

1. L3 Technical Expertise

• Provide end‐to‐end ownership of complex incidents, root cause analysis (RCA), and escalations related to Delinea & HashiCorp platforms.
• Troubleshoot and resolve advanced configuration, integration, performance, and security issues.
• Develop and maintain L3 knowledge articles, runbooks, and automation scripts.

2. Delinea (Thycotic) Responsibilities:

• Deep expertise in the following Delinea products:
• Secret Server (SS) – architecture, clustering, vault hardening, distributed engines.
• Privilege Manager – endpoint privilege elevation policies.
• Connection Manager / Remote Access Service.
• Delinea Cloud Suite – integration and federation.

Key tasks:

• Perform installation, upgrades, patching, and environment health assessments.
• Configure secret rotation, discovery, workflow approvals, and password management.
• Integrate Secret Server with AD, LDAP, Azure AD, SIEM, CyberArk, SailPoint, service accounts, cloud accounts.
• Perform custom scripting (PowerShell, REST APIs) to extend and automate Secret Server workflows.

3. HashiCorp Responsibilities

• Hands‐on experience with at least Vault + Terraform; Consul/Nomad is a strong plus.

HashiCorp Vault:

• Deploy and manage Vault clusters (OSS & Enterprise).
• Configure PKI engine, KV engine, Transit, AWS/Google Cloud Platform/Azure auth methods, and secrets lifecycle.
• Implement encryption-as-a-service, token management, DR, HA, replication.

Terraform:

• Write, optimize, and maintain Terraform IaC modules.
• Integrate Terraform with major cloud providers (AWS/Azure/Google Cloud Platform).
• Manage Terraform Cloud/Enterprise, workspaces, policies, Sentinel, state management.
• HashiCorp Consultant / Nomad (preferred)
• Service discovery, service mesh, KV operations.
• Job scheduling and orchestration via Nomad.

4. Architecture & Design:

• Design secure, scalable PAM and IaC architectures for hybrid and multi‐cloud environments.
• Lead design workshops, technical discovery, and architectural reviews.
• Recommend best practices, governance models, and operational frameworks.

5. Automation, Scripting & DevOps:

• Automate PAM and HashiCorp workflows using PowerShell, Python, Bash, Ansible, or REST APIs.
• Build CI/CD pipeline integrations for Vault, Terraform, and Secret Server.
• Perform API-based integrations with custom enterprise applications.

6. Security, Compliance & Governance:

• Ensure solutions meet enterprise requirements:
• Zero Trust
• Identity & access governance
• Secrets governance
• Audit & compliance frameworks (ISO, SOC2, NIST, PCI-DSS)
• Support audits by delivering logs, evidence, and architectural insights.

7. Stakeholder & Customer Engagement:

• Act as the technical advisor for customers and internal teams.
• Provide training, enablement, solution walkthroughs, and L2 team mentoring.
• Collaborate closely with engineering, product, cybersecurity, and cloud teams.

Notes:- All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

Benefits: Danta offers a compensation package to all W2 employees that are competitive in the industry. It consists of competitive pay, the option to elect healthcare insurance (Dental, Medical, Vision), Major holidays and Paid sick leave as per state law.

The rate/ Salary range is dependent on numerous factors including Qualification, Experience and Location.