VP, Privileged Access Management (PAM) Engineer

Essential Responsibilities:

• Administer and maintain Delinea Secret Server, Server Suite, platform components, and Delinea Just Enough Privilege (JEP) to ensure stable and compliant operations.
• Perform daily health checks of the Delinea environment, validate job/rotation status, and ensure service availability and performance.
• Remediate platform issues and credential management failures (e.g., rotation/check-out failures), perform root cause analysis, and implement corrective actions.
• Partner with credential owners and application teams to convert statically managed credentials into dynamically managed (vaulted and rotated) credentials.
• Integrate IT systems, applications, and network devices with the PAM vault, including databases, ServiceNow, and other enterprise platforms.
• Support the full lifecycle of privileged credentials, including onboarding, vaulting, rotation, access policies, and audit support.
• Leverage out-of-the-box Delinea integrations and customize configurations when required to meet business needs.
• Collaborate with security, network, infrastructure, and application teams to ensure secure connectivity, compliance, and successful onboarding.
• Provide on-call support to respond to incidents, outages, and urgent credential access/rotation issues.
• Apply patches and upgrades, monitor logs and system health, and optimize platform performance and reliability.
• Document configurations, integrations, operational procedures, and incident/root cause findings.

Leadership & Team Support Responsibilities (Added)

• Lead by example as a hands-on engineer, actively performing PAM engineering tasks while setting standards for quality, security, and operational excellence.
• Provide day-to-day guidance and support to team members (prioritization, troubleshooting assistance, technical direction), ensuring timely resolution of platform and credential issues.
• Mentor and upskill peers on Delinea capabilities, integrations, troubleshooting practices, and credential lifecycle management.
• Coordinate work across stakeholders (security, infrastructure, network, application teams) to drive onboarding and remediation efforts to completion.
• Promote operational discipline, including runbooks, repeatable processes, incident response consistency, and continuous improvement through lessons learned/root cause reviews.
• Communicate effectively during incidents and escalations, helping drive clarity, accountability, and rapid restoration of service.

Required Skills/Knowledge:

• Bachelor's degree with Minimum 12+ Years of cybersecurity, 10+ Years in PAM & 5 years Delinea and in lieu of a degree 14+ years of relevant experience.
• Proven experience with Secret Server, Server Suite, Just Enough Privilege (JEP), and related PAM capabilities.
• Demonstrated experience performing operational support, including health checks, incident response, and remediation of credential rotation failures.
• Hands-on experience integrating systems such as databases, ServiceNow, and network devices with PAM vault solutions.
• Strong understanding of privileged credential lifecycle management, rotation concepts, and security best practices.
• Experience working with credential owners/application teams to migrate from static credentials to managed/rotating credentials.
• Familiarity with Delinea out-of-the-box integrations and customization/configuration options.

Experience with most or all of the following:

• Python (useful for cross-platform automation or CI/CD pipelines)
• SQL basics (reporting/queries if you interface with Secret Server DB via approved methodsoften API is preferred)
• CI/CD automation (Azure DevOps/Jenkins/GitHub Actions): storing scripts, approvals, secrets-handling patterns
• Windows & AD basics (service accounts, gMSA, LDAP concepts)
• Linux shell (Bash) if managing Unix credentials/endpoints
• PowerShell (preferred/primary): Build and maintain automation for Delinea/Secret Server use cases, including REST API integration, JSON/data handling, modular scripting, logging, and robust error handling.
• Python: Cross-platform scripting and automation, including integration with CI/CD pipelines.
• SQL (basic to intermediate): Support reporting and data analysis needs; familiarity with querying for operational/audit insights (API-first approach when applicable).
• CI/CD Automation: Experience using Azure DevOps, Jenkins, or GitHub Actions to version, test, and deploy scripts with appropriate approvals and secure secret-handling practices.
• Windows & Active Directory: Working knowledge of service accounts, gMSA, LDAP concepts, and permission/identity management fundamentals.
• Linux/Bash: Ability to automate administrative tasks on Linux systems (SSH, sudo, cron, file permissions).

Desired Characteristics:

• Willingness and availability to participate in an on-call rotation for after-hours support.
• Strong troubleshooting, problem-solving, and communication skills; able to work effectively across teams and stakeholders.
• Demonstrated leadership characteristics: ability to lead and support a team through mentoring, coordination, clear communication, and ownershipwhile remaining handson and able to execute core engineering responsibilities.

Eligibility Criteria: Bachelor's degree with Minimum 12+ Years of cybersecurity, 10+ Years in PAM & 5 years Delinea and in lieu of a degree 14+ years of relevant experience