PAM Engineer - Delinea
First seen by Alion on Oct 30, 2026.
About the Role :
The IAM/PAM Engineer is the central technical resource responsible for the hands-on implementation, configuration, scripting, and maintenance of the Delinea PAM suite. This role translates architectural designs and business requirements into a fully functional, automated, and secure privileged access management environment.
Total Experience : 5-8 years
Key Responsibilities :
Platform Management :
- Install, configure, and maintain new modules in Delinea platform (Secret Server, Privilege Manager, Session Manager, Secure Remote Access).
Integration & Automation :
- Develop and maintain integrations between Delinea and other enterprise systems (e.g., SailPoint for IGA, ServiceNow for ticketing, Splunk for SIEM) using APIs and PowerShell/Python scripts.
Secrets Vaulting :
- Execute the onboarding of privileged accounts, service accounts, API keys, and other secrets into Delinea Secret Server, including configuring and testing automated password rotation.
Access Control Configuration :
- Implement and manage access control policies, roles, and folders within Delinea to enforce least privilege.
Session Management :
- Configure session brokering, monitoring, and recording for RDP, SSH, and web-based connections.
Operational Support :
- Serve as the Tier 3 support escalations point for PAM-related issues, perform routine maintenance, and ensure platform health and performance.
Required Skills & Qualifications :
- 3+ years of hands-on experience implementing and administering Delinea.
- Strong scripting skills (PowerShell, Python) for automation and integration.
- In-depth knowledge of PAM and IAM concepts (provisioning, SSO, RBAC) and integration with IGA tools.
- Solid understanding of Windows and Linux security and administration.
- Experience with network protocols and security concepts (Firewalls, DNS, AD, LDAP).
Delinea Core Concepts :
- Deep understanding of PAM principles : vaulting, session management, and privilege delegation.
- Knowledge of Delinea's architecture : Secret Server or PAM Essentials components, including the Distributed Engine.
- Understanding of Secret Templates, Folders, and Access Control mechanisms within Delinea.
Authentication & Authorization :
- OAuth 2.0 / OpenID Connect (OIDC) : Skill in configuring OAuth clients in both systems for secure server-to-server communication.
- Token Management : Handling access tokens, refresh tokens, and API keys securely.
Desirable Skills & Qualifications :
- Knowledge in SailPoint ISC Workflows and the Delinea API/PowerShell SDK.
- Ability to interpret the output of Delinea AI/PAM-I.
- Skills in platforms like Azure Logic Apps, AWS Step Functions, or Microsoft Power Automate can be useful as an integration broker.
Skills
Security, Identity Management, Delinea, Python, SailPoint, Splunk, Active Directory, LDAP, CyberArk PAM, Privilege Access Management