Delinea PAM Senior IAM Engineer

Senior IAM Engineer – Delinea PAM (Secret Server & Privilege Manager SME)

Location: Lake Forest, IL
Duration: 12+ Months
Experience Required: 6–8+ Years
Competency: Delinea Suite | Cyber Security – IAM Professional Services

Critical Requirement

• Hands-on technical expertise in Delinea is Non-Negotiable.

• Candidate must be able to demonstrate real-world use cases during client interviews.

• Must be a Subject Matter Expert (SME) in:

  • Delinea Secret Server

  • Delinea Privilege Manager

Profiles that are purely analytical (non-technical) will not be considered.

Position Overview

We are seeking a Senior Privileged Access Management (PAM) Engineer to lead the design, implementation, and optimization of the Delinea PAM ecosystem.

The primary mission is to eliminate standing privileges, secure critical credentials, and enforce least privilege principles across infrastructure, cloud, and DevOps environments.

Core Responsibilities

Delinea Architecture & Implementation

• Lead end-to-end implementation and scaling of:

  • Delinea Secret Server (On-Prem & Cloud)

  • Delinea Privilege Manager

• Architect distributed engines and secret policies.

• Design scalable and secure PAM infrastructure.

Secret & Credential Management

• Configure and maintain:

  • Secret heartbeat monitoring

  • Remote Password Changing (RPC)

  • Check-out / Check-in workflows

• Secure service accounts, local admin, and root credentials.

• Automate lifecycle management of privileged accounts.

Secure Remote Access (SRA)

• Implement VPN-less remote access solutions (e.g., Delinea PRA).

• Provide secure, audited access for:

  • Internal administrators

  • Third-party vendors

• Configure session proxy and session recording for high-risk sessions.

Endpoint & Least Privilege Enforcement

• Configure application control and elevation policies in Privilege Manager.

• Enforce least privilege across endpoints.

• Eliminate full local administrator access where unnecessary.

Hybrid & Cloud Integration

• Ensure interoperability between:

  • Delinea (On-Prem)

  • Azure PIM / Microsoft Entra ID (Cloud Control Plane)

• Configure:

  • Conditional Access

  • Managed Identities

• Create unified identity security posture.

Integration & Automation

• Integrate Delinea with:

  • Active Directory / Azure AD

  • SIEM (e.g., Sentinel)

  • ServiceNow

• Manage automated discovery of unmanaged accounts across:

  • Windows

  • Linux/Unix

  • Network devices

• Use PowerShell or Python to automate Delinea API operations.

• Utilize SQL for reporting and compliance data extraction.

Compliance & Audit

• Generate audit-ready reports.

• Lead remediation of privileged access findings.

• Align PAM controls with compliance standards.

Technical Requirements

• 5+ years of IAM experience.

• 3+ years of dedicated hands-on Delinea experience (Mandatory).

• Deep expertise in:

  • Secret Server (Distributed Engines, Secret Policies)

  • Privilege Manager (Application Control, Elevation)

• Strong Microsoft Entra ID / Azure PIM experience.

• Strong Windows Server, Active Directory, GPO knowledge.

• Experience with Linux/Unix environments.

• Scripting expertise (PowerShell or Python).

• SQL proficiency for reporting.

Key Competencies

• Deep technical SME-level expertise in Delinea.

• Strong troubleshooting and problem-solving skills.

• Ability to design scalable PAM architectures.

• Strong communication skills for stakeholder engagement.

• Experience in enterprise IAM professional services environments.