Security PAM Engineer

Initial 6-month contract engagement to lead the design, configuration, and implementation of the Account Lifecycle Management (ALM) engine, with strong potential for full-time conversion based on performance and milestone achievements. The role involves architecting automated account lifecycle workflows, integrating Delinea with Active Directory and existing vault environments, operationalizing privileged service account governance, and additional PAM work. Note: the company cannot sponsor or transfer any visas at this time.

Responsibilities

Deploy, configure, and optimize the Delinea Secret Server Account Lifecycle Management (ALM) engines according to enterprise security standards; Connect and synchronize ALM workflows with on-premises/hybrid Active Directory environment and ensure integration with existing secret vault architecture; Design, execute, and validate a pilot lifecycle management program for an initial cohort of 10 critical service accounts; Rapidly scale and onboard an additional 25 service accounts post-pilot; Establish end-to-end automated workflows for service account creation, credential rotation, privileged elevation, discovery, and de-provisioning; Develop and deliver technical documentation, including architectural as-builts, configuration guides, operational runbooks, and Tier 2/Tier 3 support handover materials; Partner with internal security, IAM, and systems engineering teams to ensure compliance, privileged access auditability, and minimal disruption to business operations

Requirements

5+ years of progressive experience in Information Security with a specialized focus on Identity & Access Management (IAM) and Privileged Access Management (PAM); 3+ years of hands-on technical experience deploying, configuring, and administering Delinea Secret Server; Proven track record implementing Delinea Account Lifecycle Management (ALM) or equivalent privileged service account governance modules; Deep technical proficiency with Active Directory (AD) architecture, LDAP/Kerberos protocols, group policies, and service principal/service account administration; Strong background integrating PAM vaults with enterprise directory services, SIEM platforms, and infrastructure endpoints; Experience authoring structured technical documentation, including as-built architectures, SOPs, and operational runbooks; Strong diagnostic, troubleshooting, and stakeholder communication skills, with the ability to lead technical pilots through to enterprise-wide rollout