Job Title: Delinea Suite Architect Location: Lake Forest, Illinois (On-Site)
Job Description:
Competencies: 6-8+ years experience required
Delinea Suite ARCHITECT
Cyber Security - IAM Professional Services
(SME) for Secret Server and Privilege Management
Hands on technical skills on Delinea is non-negotiable. The customer will expect to candidate to demonstrate technical skills with use cases when the customer interviews. Most submissions so far, either are analyst and not technical or they do not have technical experience in Delinea. Along with Delinea, the candidate is expected to be a Subject Matter Expert (SME) for Secret Server and Privilege Management.
We are looking for a Senior PAM Engineer to lead the design, implementation, and management of our Privileged Access Management (PAM) ecosystem. Your primary mission is to eliminate standing privileges and secure our most critical credentials using the Delinea suite. You will act as the Subject Matter Expert (SME) for Secret Server and Privilege Manager, ensuring that our infrastructure, cloud environments, and DevOps pipelines are protected against credential theft.
Core Responsibilities
Lead the end-to-end implementation and scaling of Delinea Secret Server (on-prem or cloud) and Delinea Privilege Manager.
Design and maintain secret heartbeat, remote password changing (RPC), and checkout/check-in workflows for service, local admin, and root accounts.
Provide secure, audited remote access for internal admins and third-party vendors using Delinea PRA or similar VPN-less solutions.
Configure policies in Delinea Privilege Manager to enforce least privilege and allow users to perform administrative tasks without full local admin rights.
Integrate Delinea with Active Directory, Azure Active Directory, Sentinel SIEM, and ServiceNow to automate lifecycle management.
Configure and audit session recording and monitoring for high-risk administrative sessions.
Generate reports to satisfy audit and compliance requirements and drive remediation of privileged access findings.
Technical Requirements
5+ years of dedicated experience in Identity and Access Management with at least 3 years focused on Delinea products (formerly Thycotic).
Deep technical knowledge of Delinea Secret Server (Distributed Engines, Secret Policies) and Privilege Manager (Application Control, Elevation).
Strong experience with Microsoft Entra ID/Azure PIM, Conditional Access, and Managed Identities.
Solid understanding of Windows Server administration, Active Directory, Group Policy, and Linux/Unix environments.
Proficiency in PowerShell or Python for API automation and bulk secret import.
Ability to use SQL to create custom reports.