Security Architect - Remote

Security Architect
Remote
Contract

• Design, deploy, and manage Delinea Secret Server in enterprise environments.
• Implement and support:
  • Password vaulting & rotation
  • Session recording & monitoring
  • Privilege elevation
  • Application-to-application password management (AAPM)
• Create and manage custom roles, policies, and workflows.
• Onboard privileged accounts, service accounts, SSH keys, and certificates.
• Configure integrations with AD, Azure AD, ITSM tools, SIEM, and ticketing systems.
• Develop PowerShell scripts for automation (password rotation, onboarding, reporting).
• Conduct system health checks, performance tuning, and upgrade activities.

Saviynt Responsibilities

• Configure and manage Saviynt IGA/EIC platform for identity lifecycle, governance, and access workflows.
• Build/maintain:
  • User provisioning & de-provisioning
  • Access request workflows
  • Role mining & SoD policies
  • Certifications & recertification campaigns
• Integrate applications via Saviynt connectors (e.g., AD, SAP, Azure AD, Workday, custom apps).
• Develop analytics, dashboards, and custom rule sets (tasks, workflows, SOD rules).
• Implement identity governance best practices and compliance controls (SOX, GDPR, ISO 27001).
• Troubleshoot workflow issues, connector failures, provisioning errors, and policy violations.

Cross-Platform IAM Responsibilities

• Collaborate with InfoSec, Cloud, and Infra teams on IAM/PAM strategy and roadmap.
• Identify gaps in Identity and Privilege processes and recommend improvements.
• Support audits, compliance assessments, and risk mitigation activities.
• Document technical configurations, architectures, SOPs, and operational guides.
• Lead incident response for IAM/PAM security incidents.

Required Skills & Experience

• 6 12+ years of hands-on experience in IAM/PAM.
• Expert-level skills in:
  • Delinea Secret Server / Thycotic
  • Saviynt IGA/EIC
• Strong understanding of:
  • Privileged Access Management (PAM) concepts
  • Identity Governance & Administration (IGA)
  • Directory services (AD, Azure AD, LDAP)
  • Authentication protocols (SAML, OAuth, OIDC, Kerberos)
• Proficiency in scripting:
  • PowerShell (preferred)
  • Python (good to have)
• Experience with cloud platforms (Azure, AWS, Google Cloud Platform) is a plus.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Delinea certifications (e.g., Secret Server Engineer).
• Saviynt Certified Engineer / Administrator certification.
• CISSP, CISM, or other cybersecurity certifications.
• Experience with DevOps, CI/CD, APIs, or automation tools.