Senior PAM Security Engineer (Delinea Certified)

BLS360 is seeking a highly skilled and experienced Senior PAM Security Engineer with a strong background in implementing, managing, and optimizing Delinea PAM solutions. The ideal candidate will play a critical role in securing privileged access across enterprise systems and infrastructure, ensuring compliance with security standards, and supporting the maturity of the IAM program.

Responsibilities:

• Lead the design, deployment, and management of Delinea PAM solutions , including Secret Server and/or Privileged Access Service (PAS)
• Perform configuration, maintenance, and optimization of PAM tools to support enterprise access control policies and secure credential storage
• Develop and implement workflows, access policies, vault configurations, and session management tailored to organizational needs
• Conduct risk assessments, gap analyses, and audits of privileged accounts across infrastructure and cloud environments
• Integrate PAM systems with enterprise directories (e.g., AD, LDAP), ticketing systems (e.g., ServiceNow), SIEM tools, and other security platforms
• Collaborate with DevOps, Infrastructure, and Application Security teams to enforce least privilege principles
• Respond to and investigate privileged access incidents or anomalies
• Provide technical leadership and guidance on PAM architecture, roadmaps, and best practices
• Support compliance efforts for standards such as NIST, ISO, SOC 2, HIPAA, and PCI-DSS
• Mentor junior engineers and participate in security awareness training related to privileged access

Requirements:

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)
• 8+ years of experience in Information Security, with 5+ years focused on Privileged Access Management
• Delinea certification (e.g., Delinea Certified Engineer, Thycotic Secret Server Certified, etc.)
• Deep knowledge of Delinea PAM suite, including Secret Server, Cloud Suite, and/or Privileged Access Service
• Strong understanding of identity federation, RBAC, and Zero Trust architecture
• Experience with scripting/automation (e.g., PowerShell, Python, APIs)
• Solid understanding of Windows, Linux, and cloud infrastructure (Azure, AWS, GCP)
• Familiarity with compliance standards and audit frameworks