Senior IAM Engineer with exp on Delinea

Senior IAM Engineer with exp on Delinea
Lake Forest, IL


Technical Requirements:
Experience 5 years of dedicated experience in Identity and Access Management (IAM), with at least 3 years specifically focused on Delinea (formerly Thycotic).
Delinea Mastery Deep technical knowledge of Secret Server (Distributed Engines, Secret Policies) and Privilege Manager (Application Control, Elevation).
Delinea Architecture Lead the end-to-end implementation and scaling of Delinea Secret Server (On-prem or Cloud) and Delinea Privilege Manager.
Microsoft Entra ID Strong experience with Azure PIM, Conditional Access, and Managed Identities.
Infrastructure Skills Strong understanding of Windows Server administration, Active Directory, GPOs, and Linux UNIX environments.
Scripting Proficiency in PowerShell or Python to automate API calls to Delinea and bulk-import secrets. Proficiency in SQL to generate reports.


Essential Skills:
Senior IAM Engineer (Privileged Access Management)
Focus Delinea Secret Server Privilege Manager Experience 6-8+ Years


Role Overview
We are looking for a Senior PAM Engineer to lead the design, implementation, and management of our Privileged Access Management (PAM) ecosystem.
Your primary mission is to eliminate standing privileges and secure our most critical credentials using the Delinea suite.
You will act as the Subject Matter Expert (SME) for Secret Server and Privilege Manager, ensuring that our infrastructure, cloud environments, and DevOps pipelines are secured against credential theft.


Core Responsibilities:
Delinea Architecture Lead the end-to-end implementation and scaling of Delinea Secret Server (On-prem or Cloud) and Delinea Privilege Manager.
Secret Management Design and maintain secret heartbeat, remote password changing (RPC), and check-out check-in workflows for service accounts, local admins, and root accounts.
Secure Remote Access (SRA) Have a good understanding of VPN-less remote access solutions (e.g., Delinea PRA) to provide secure, audited entry points for internal admins and third-party vendors.
Azure PIM General understanding of Azure PIM.
Endpoint Privilege Management Configure policies in Delinea Privilege Manager to enforce Least Privilege, allowing users to perform administrative tasks without having full local admin rights.
Hybrid Integration Ensure interoperability between Delinea (for on-prem) and Azure PIM (for Cloud Control Plane access), creating a unified identity security posture.
Integration Automation Integrate Delinea with Active Directory (AD Azure AD), SIEM (Sentinel), and Ticket Systems (ServiceNow) to automate lifecycle management.
Discovery Onboarding Manage automated discovery rules to identify unmanaged accounts across Windows, Linux, and Network devices.
Session Management Configure and audit session recording and monitoring (Protocol Handler Session Proxy) for high-risk administrative sessions.
Compliance Audit Generate high-level reporting for audit requirements and lead remediation efforts for privileged access findings.

Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.