Delinea

JOB DESCRIPTION

Responsibilities

• Install, configure, and administer Thycotic Secret Server / Delinea Secret Server, Privilege Manager, and Connection Manager across enterprise environments.
• Onboard privileged accounts (Windows, Linux, service accounts, database accounts, cloud IAM roles) into the PAM vault with appropriate workflows and policies.
• Design and enforce least-privilege access models, session monitoring, and just-in-time (JIT) access provisioning.
• Configure discovery scans for unmanaged privileged accounts and drive remediation of orphaned / stale credentials.
• Integrate PAM with SIEM, ITSM (ServiceNow), Active Directory / LDAP, MFA solutions, and DevOps pipelines.
• Implement SSH key and certificate management; manage service account rotation and dependency mapping.
• Monitor and review privileged session recordings; respond to policy violations and anomalous access alerts.
• Perform PAM health checks, patching, upgrades, and capacity planning.
• Develop runbooks, SOPs, and technical documentation for PAM processes and playbooks.
• Support audit and compliance activities produce evidence for ISO 27001, SOC 2, PCI-DSS, and internal controls reviews.

Qualifications:

• Thycotic Secret Server / Delinea admin & architecture
• Privileged account onboarding & discovery
• Active Directory, LDAP, Kerberos
• Session monitoring & recording policies
• Least privilege & JIT access design
• Secret rotation & dependency mapping
• PAM-SIEM integration (Splunk / QRadar)
• Windows Server & Linux administration
• MFA integration (RADIUS, SAML, TOTP)

3+ years in IAM / PAM with at least 2 years of hands-on Thycotic / Delinea administration.