Senior Technical Consultant | Identity / PAM (Delinea) | 465868

Senior Technical Consultant | Identity / PAM (Delinea) | 465868

DETAILS

Location: 100% Remote

Position Type: 6M C2H

Hourly / Salary: to $120W2 – $160W2 (based on experience level)

 

JOB SUMMARY

Vaco Technology is currently seeking a Senior Technical Consultant | Identity / PAM (Delinea) for a 6M C2H opportunity that is remote-based.  The Senior Technical Consultant will lead the architecture, design, deployment, and migration enablement of Delinea Secret Server across multiple geographies (UAT / Non-Production, APAC, Europe, and US). The Senior Technical Consultant will partner with internal IT and stakeholders to assess existing configurations, conduct design workshops, configure Delinea Secret Server (Premium/Platinum), support customer-led migration from Hitachi PAM, and drive Production Readiness Review (PRR) preparation and delivery.

• Architecture / Design / Workshops – Lead Discovery and Details Design Activities | Define Target-State Architecture for Delinea Secret Server | Define Authentication Approach (Directory Services / Federation) | Ensure Alignment with Delinea Architecture (Platform vs Secret Server) | Facilitate Workshops for Design and Migration Planning

• UAT | Non-Production Deployment / Validation – Review and Assess UAT Environment to Determine Configuration and Readiness | Design and Configure UAT to Mirror EU/US Configurations | Validate Configurations | Support Testing and User Acceptance Activities

• Delinea Secret Server / Delinea Platform Configuration

• Deploy / Configure Delinea Secret Server (Premium / Platinum) and Delinea Platform Components Aligned to the Selected Target Architecture (Platform vs Secret Server-led)

  • Configure / Validate Identity / Authentication using Single Directory Services of Federation / SSO Approach – Implemented in Delinea Platform or Secret Server as Designed

  • Design / Implement RBAC Across Solutions (Platform Roles / Secret Server Roles) – Role Mapping / Inheritance Strategy / Least-Privilege Access

  • Build / Govern Folder Structure / Access Boundaries / Administrative Delegations Consistent with Regional Operating Models

  • Configure Distributed Engines / Site locations and Related Connectivity Requirements – Support Discovery / Rotation / Remote Session Workflows

  • Configure SSH / RDP Launchers / Session Workflows / Custom Secret Template Mappings

  • Configure Discover Sources (AD / Entra ID) / Discovery Rules for Automated Account Import / Provide Guidance for Scaling Additional Rules

  • Configure / Tune Password Policies / Secret Policies / Web Password Workflows / Operational Runbooks

  • Configure Alerting / Event Subscription (email / events) – Ensure Auditability / Reporting Readiness

  • Implement the Required Number of Platforms / 3rd Party Integrations – Ticketing / Vulnerability Management / Identity Governance (Testing / Operational Handoff)

• Migration Enablement (Hitachi to Delinea) – Advise / Hands-on Assistance for Customer-Led Migrations of Userbase / Secrets from Hitachi to Delinea Secret Server) | Support Migration Planning / Execution / Stabilization Through Post-Migration Break/Fix / Troubleshooting

• Integrations – Configure up to 3 Delinea Integrations Per Rollout (Vulnerability Management / Ticketing / Identity Governance).

• Production Readiness Review (PRR) – Develop PRR Supporting Documentation / Artifacts | Partner with IT Teams to Prepare / Deliver PRR Presentations

• Knowledge Transfer / Documentation – Provide Post-Deployment Knowledge Transfer | Draft / Support Communication Plan for Rollout / Change Management

 

JOB REQUIREMENTS

• Identity / PAM (Delinea) Consultant – Secret Server / Platform Implementations

• PAM Architecture (Delinea)

• Active Directory / Entra ID SSO

• RBAC (Role-based Access Control)

• Distributed Engines / Discovery and Policies / Migration / Integrations / Enterprise Troubleshooting / Documentation / Workshops

 

PREFERRED (not required)

• CyberArk

• IAM / IGA (Sailpoint / Okta)

• Delinea Platform Modules

• SSO / MFA

• ITSM / Vulnerability Integrations

• Azure / AWS Security

• Automation Scripting

• Global Rollout / Change Management
   

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products.