PAM Engineering Lead — Delinea Expert (Remote)

Role Summary / Purpose We are looking for a highly skilled PAM Engineer with proven experience in Delinea Secret Server, Server Suite, and Delinea Just Enough Privilege (JEP) to manage and enhance our privileged access management infrastructure. This role involves installing, configuring, and maintaining PAM platforms; integrating a variety of IT systems—including databases, ServiceNow, and network devices—with the PAM vault; and supporting secure credential management processes. Responsibilities Responsibilities expand this role to include technical leadership, strategic support, and guidance across the PAM program. The ideal candidate will serve as a technical leader who supports and mentors engineers, influences PAM roadmap direction, drives standardization and automation, and partners with stakeholders to ensure PAM capabilities align to enterprise security and business objectives. Engineering & Operations Install, configure, and maintain Delinea Secret Server, Server Suite, platform components, and Delinea Just Enough Privilege (JEP). Integrate various IT systems, applications, and network devices with the PAM vault, including databases and ServiceNow. Support the management, vaulting, and rotation of privileged credentials across integrated platforms. Work with out‑of‑the‑box PAM integrations and customize where necessary to meet business requirements. Troubleshoot PAM system issues, perform root cause analysis, and implement timely resolutions. Manage and submit firewall requests related to PAM system connectivity and functionality. Collaborate with network, security, and application teams to ensure seamless PAM integration and compliance. Provide on‑call support for PAM system availability, promptly responding to incidents and outages. Monitor PAM system health, apply patches and upgrades, and optimize performance. Document system configurations, integrations, procedures, and incident resolution reports. Technical Leadership, Strategic Vision & Guidance Serve as a technical leader for PAM engineering, providing guidance, oversight, and technical direction to engineers. Partner with security leadership and stakeholders to support the PAM strategic vision, roadmap planning, and prioritization of enhancements aligned to enterprise risk reduction and business needs. Lead design and review of complex PAM solutions, including architecture decisions, patterns/standards, and integration approaches across infrastructure and applications. Drive standardization and operational maturity (e.g., onboarding patterns, credential rotation standards, JEP policy conventions, break‑glass processes, and audit readiness). Identify opportunities for automation and self‑service, improving onboarding speed, reducing manual effort, and increasing reliability. Lead or support major initiatives such as platform upgrades, migrations, new capability rollouts, and resilience improvements. Provide technical mentorship through code/config reviews, troubleshooting support, knowledge sharing, and development of runbooks and engineering playbooks. Own and improve key operational outcomes such as SLA/SLO performance, incident reduction, root‑cause remediation, and continuous improvement backlog management. Support security and compliance needs by ensuring PAM implementations meet policy requirements and are prepared for audit and reporting expectations. Perform other duties and/or special projects as assigned. Qualifications / Requirements Bachelor's degree in Information Technology, Cybersecurity, or a related discipline is preferred; in lieu of a degree, minimum 8 years of relevant experience will be considered. 6+ years of experience in cybersecurity, with depth in Identity & Access Management (IAM) and security controls, including one or more of: Privileged Access Management (PAM), SSO, MFA, CIAM, RBAC, and/or directory governance. Proven experience with Delinea Secret Server, Server Suite, Delinea Just Enough Privilege (JEP), and related PAM platforms. Hands‑on experience integrating diverse solutions (databases, ServiceNow, network devices) with PAM vaults. Strong knowledge of privileged credential lifecycle management and security best practices. Demonstrated ability to provide technical leadership (leading designs, mentoring engineers, setting standards, influencing decisions). Experience driving or supporting roadmap planning, cross‑team prioritization, and execution of complex technical initiatives. Familiarity with out‑of‑the‑box PAM integrations and customization capabilities. Experience managing firewall requests and collaborating with infrastructure teams. Comfort with crafting and editing: PowerShell (preferred/primary): Build and maintain automation for Delinea/Secret Server use cases, including REST API integration, JSON/data handling, modular scripting, logging, and robust error handling. SQL (basic to intermediate): Support reporting and data analysis needs; familiarity with querying for operational/audit insights. Linux/Bash: Ability to automate administrative tasks on Linux systems (SSH, sudo, cron, file permissions). Willingness and availability to participate in on‑call rotations for after‑hours support. Excellent troubleshooting, problem‑solving, and communication skills. Ability to work effectively across technical teams and stakeholders. Ability and flexibility to travel for business as required. Salary and Benefits The salary range for this position is 135,000.00 – 230,000.00 USD annually and is eligible for an annual bonus based on individual and company performance. Actual compensation offered within the posted salary range will be based upon work experience, skill level, or knowledge. Salaries are adjusted according to market in CA, NY Metro, and Seattle. Work Flexibility We offer flexibility. At Synchrony, you may work from home near one of our hubs or come into one of our offices. You will be required to commute to your nearest hub for in‑person engagement activities such as regular business or team meetings, training, and culture events. EEO Statement All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or age. Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. Reasonable Accommodation Notice Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please let us know if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. Representatives are available from 8am – 5pm Monday to Friday, Central Standard Time. Job Family Group Information Technology #J-18808-Ljbffr Synchrony