Delinea PAM Architect

@ 2T Consulting
2T Consulting2tconsulting.com

Delinea PAM Architect

Park Cities, Texas
Posted 2 days ago

About the job

This role focuses on leading PAM architecture, design, and security solutions using Delinea and CyberArk platforms, supporting enterprise and cloud security initiatives.

Requirements

  • Experience with Delinea Secret Server
  • Knowledge of CyberArk PAM solutions
  • Experience with platform migrations
  • Skills in REST APIs and scripting
  • Understanding of cloud security

Qualifications

  • Proven enterprise security experience
  • Strong communication skills
  • Experience in security transformation
  • Knowledge of identity protocols

Full job description

Roles and Responsibilities
  • Lead architecture and solution design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault (DSV).
  • Define and execute CyberArk-to-Delinea migration strategy, including migration waves, cutover planning, rollback procedures, and risk mitigation.
  • Design PAM security models including Safe-to-Folder mapping, RBAC, privileged access workflows, password rotation policies, and session recording.
  • Architect integrations with enterprise platforms including Active Directory/LDAP, RADIUS, SailPoint, Saviynt, ServiceNow, Splunk, ArcSight, Okta, and Microsoft Entra ID.
  • Provide technical leadership and guidance to offshore Delinea implementation and automation teams.
  • Conduct architecture reviews, security assessments, design validations, and executive/client workshops.
  • Collaborate with client PAM teams and Delinea Professional Services to ensure successful transformation delivery.
  • Define automation approaches using REST APIs, PowerShell, and scripting to streamline PAM operations.
  • Support cloud and DevOps security initiatives involving Azure, AWS, Kubernetes, and secrets management solutions.
Required Skills
  • Strong hands-on experience with Delinea Secret Server (Cloud and On-Premises).
  • Experience with Delinea DevOps Secrets Vault (DSV), Connection Manager, and Discovery Engine.
  • Extensive knowledge of CyberArk PAM solutions, including PAS, CPM, PSM, PSMP, AIM/AAM, and Conjur.
  • Proven experience leading PAM migrations, platform transformations, and enterprise security implementations.
  • Strong understanding of authentication and identity protocols including SSO, SAML, OAuth, OIDC, LDAP, RADIUS, and SCIM.
  • Experience integrating PAM platforms with ITSM, IAM, and SIEM solutions such as ServiceNow, SailPoint/Saviynt, Splunk, and ArcSight.
  • Strong experience with REST APIs, PowerShell automation, and scripting.
  • Knowledge of cloud security and secrets management across Azure, AWS, Kubernetes, and DevOps environments.
  • Excellent communication skills with experience working with technical teams, security stakeholders, and executive leadership.
Preferred Qualifications
  • Experience designing enterprise-scale PAM architectures.
  • Experience working with global teams and complex security transformation programs.
  • Strong understanding of privileged identity lifecycle management and cybersecurity best practices.
Show full description