VP-Privileged Access Management (PAM) Engineer - Delinea

Overview

Lead hands-on privileged access management engineering for the Delinea environment, including Secret Server, Server Suite, and Just Enough Privilege (JEP). Own daily platform operations, integrations, credential lifecycle management, troubleshooting, and team support while maintaining compliant and resilient PAM services.

What you'll do

• Administer and maintain Delinea Secret Server, Server Suite, platform components, and Delinea Just Enough Privilege (JEP).
• Perform daily health checks, validate job and rotation status, and ensure service availability and performance.
• Remediate platform issues and credential management failures, perform root cause analysis, and implement corrective actions.
• Partner with credential owners and application teams to convert statically managed credentials into dynamically managed, vaulted, and rotated credentials.
• Integrate IT systems, applications, network devices, databases, ServiceNow, and other enterprise platforms with the PAM vault.
• Support privileged credential onboarding, vaulting, rotation, access policies, and audit activities.
• Use Delinea integrations and customize configurations when required to meet business needs.
• Collaborate with security, network, infrastructure, and application teams to support secure connectivity, compliance, and onboarding.
• Provide on-call support for incidents, outages, and urgent credential access or rotation issues.
• Apply patches and upgrades, monitor logs and system health, and optimize platform performance and reliability.
• Document configurations, integrations, operational procedures, and incident and root-cause findings.
• Lead by example as a hands-on engineer and set standards for quality, security, and operational excellence.
• Guide team members on prioritization, troubleshooting, and technical direction.
• Mentor and upskill peers on Delinea capabilities, integrations, troubleshooting, and credential lifecycle management.
• Coordinate work across security, infrastructure, network, and application stakeholders to complete onboarding and remediation efforts.
• Promote runbooks, repeatable processes, consistent incident response, continuous improvement, and lessons learned or root-cause reviews.
• Communicate during incidents and escalations to support clarity, accountability, and rapid restoration of service.

What you'll need

• Bachelor's degree with minimum 12+ years of cybersecurity experience, 10+ years in PAM, and 5 years of Delinea experience, or 14+ years of relevant experience in lieu of a degree.
• Proven experience with Secret Server, Server Suite, Just Enough Privilege (JEP), and related PAM capabilities.
• Experience with operational support, including health checks, incident response, and remediation of credential rotation failures.
• Hands-on experience integrating databases, ServiceNow, network devices, and other systems with PAM vault solutions.
• Strong understanding of privileged credential lifecycle management, rotation concepts, and security best practices.
• Experience migrating static credentials to managed and rotating credentials with credential owners and application teams.
• Familiarity with Delinea out-of-the-box integrations and customization or configuration options.
• Experience with most or all of Python, SQL basics, CI/CD automation, Windows and Active Directory basics, Linux shell (Bash), and PowerShell.
• PowerShell experience for Delinea and Secret Server automation, including REST API integration, JSON and data handling, modular scripting, logging, and robust error handling.
• Python experience with cross-platform scripting, automation, and CI/CD pipeline integration.
• Basic to intermediate SQL experience for reporting, data analysis, and operational or audit insights, using an API-first approach when applicable.
• CI/CD automation experience with Azure DevOps, Jenkins, or GitHub Actions to version, test, and deploy scripts with appropriate approvals and secure secret-handling practices.
• Working knowledge of Windows and Active Directory, including service accounts, gMSA, LDAP concepts, and permission and identity management fundamentals.
• Ability to automate administrative tasks on Linux systems using SSH, sudo, cron, and file permissions.

Nice to have

• Willingness and availability to participate in an on-call rotation for after-hours support.
• Strong troubleshooting, problem-solving, and communication skills, with the ability to work effectively across teams and stakeholders.
• Leadership characteristics, including mentoring, coordination, clear communication, and ownership while remaining hands-on and executing core engineering responsibilities.

Details

• Location: Hyderabad, India.
• Work may be performed from home or from workspaces in Regional Engagement Hubs in Hyderabad, Bengaluru, Pune, Kolkata, or Delhi/NCR.
• As directed by management, commute or travel to Hyderabad or one of the Regional Engagement Hubs for business or team meetings, trainings, and events.
• Available between 06:00 AM Eastern Time and 11:30 AM Eastern Time for meetings with India and US teams; remaining hours are flexible, with periodic exceptions due to business needs.
• Participate in an on-call rotation for after-hours support.
• Grade/Level: 12; Job Family Group: Information Technology.