PAM Implementation Engineer (1099 Hourly Contract)
Free to start · No card · 5 credits the moment you sign up
Job description
Delinea PAM Implementation Engineer (Contract)
Summary
Airitos LLC is delivering an enterprise Privileged Access Management (PAM) design and implementation for a global manufacturing client and is seeking a contract implementation engineer with hands-on Delinea experience. This is the build role on the program: standing up core PAM infrastructure across two AD forests, onboarding privileged accounts at scale, and configuring session controls, integrations, and monitoring through to handoff.
The role is remote with little to no travel required. The engagement runs approximately 10 months, with delivery activity continuing through 2027. The engineer reports to the Airitos IAM/PAM Architect and works alongside the Airitos technical and process analysts and the client’s infrastructure, cybersecurity, and applications teams.
Environment
- Heavy Microsoft environment, mostly on-prem with some cloud presence
- Azure as the preferred cloud platform; AWS for SAP; Microsoft Entra ID (E5)
- Microsoft Sentinel for SIEM; ServiceNow for ITSM
- No enterprise PAM in place today; this is a greenfield Delinea deployment
Key Responsibilities
- Deploy and configure core Delinea infrastructure (Secret Server and supporting components) across both forests, including web/application and database tiers, distributed engines for segmented connectivity, and certificate-based trust between systems.
- Discover, import, and vault privileged accounts and non-human identities; configure automated password rotation policies; establish and test break-glass emergency access procedures.
- Configure privileged session brokering, session recording with defined retention, and least-privilege enforcement for critical systems and applications.
- Build just-in-time access workflows tied to ServiceNow approval.
- Integrate PAM session and audit activity with Microsoft Sentinel; configure alerting.
- Support integration design and build for Azure and development tooling connectivity.
- Track and report onboarding volume and pace as the account universe is brought under management.
- Produce operational runbooks, contribute to knowledge transfer, and support training and handoff to client staff.
Required Qualifications
- Hands-on Delinea implementation experience, specifically Delinea Secret Server (vault architecture, secret templates, rotation, discovery) and the Delinea Platform.
- Working knowledge of Delinea components including Distributed Engines, Connection Manager, session recording/monitoring, and Privilege Manager.
- Strong Windows Server and Active Directory background, including multi-forest environments; familiarity with Microsoft Entra ID.
- Experience onboarding privileged accounts and configuring rotation policies at scale (thousands of accounts).
- PKI and certificate management, network segmentation concepts, and firewall-aware deployment across distributed sites.
- Scripting and automation with PowerShell and REST APIs.
- Experience integrating PAM tooling with a SIEM (syslog/CEF) and with an ITSM platform for approval workflows.
- Practical understanding of tiered administration (Tier 0 through Tier 3), the Microsoft Enterprise Access Model, just-in-time access, and least privilege.
Preferred Qualifications
- Delinea certification (Secret Server / Platform).
- Experience implementing PAM across disconnected or untrusted multi-forest AD environments.
- Familiarity with non-human identity and secrets management (service accounts, service principals, DevOps secrets).
- Azure and AWS exposure; awareness of Entra PIM and how it interacts with a PAM deployment.
- ServiceNow workflow integration experience.
- Awareness of regional privacy considerations for session recording.
- Experience producing operational runbooks and transitioning day-to-day ownership to a client operations team.
Engagement Details
- 1099 Contract role, engaged by Airitos LLC.
- Weekly Hours to Vary from 15-35
- Approximately 10 months, delivery continuing through 2027.
- Remote; little to no travel required.
- Reports to the Airitos IAM/PAM Architect.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for Airitos. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.