Delinea/Thycotic secret server

PwC; Kolkata District, Hyderabad, Bengaluru; Hybrid; INR 1,800,000 - 2,400,000; Full time

Job summary

PwC is seeking an experienced PAM consultant to implement and manage CyberArk PAM or Delinea solutions across on-prem and cloud environments.

The role focuses on policy design, automation, and integration with existing DevOps pipelines, with hands-on experience in Vault/Secret Server components, scripting, and secure credential management.

Qualifications

• Hands-on implementation experience with CyberArk PAM or Delinea (Thycotic) Secret Server and Privilege Manager.
• Designing policies, certifications/attestations, workflows, and custom connectors/integrations for PAM.
• Proficiency deploying and configuring CyberArk components or Delinea Secret Server.
• Strong scripting and automation using Python, PowerShell, or Shell; REST APIs/SDKs.

Responsibilities

• Install, configure, and migrate PAM solutions (CyberArk or Delinea).
• Design policies, attestations, workflows, and custom connectors for PAM.
• Automate credential rotation and onboarding across Windows/Linux/Web portals.
• Develop custom scanners and reporting in Delinea; integrate with CI/CD pipelines.
• Collaborate with DevOps, security teams; document processes and enable Agile delivery.

Skills

CyberArk PAM

Delinea Secret Server

Privileged access management

Automation scripting

Python

PowerShell

Shell scripting

REST APIs

CI/CD integration

DevOps concepts

Security hardening

Documentation

Agile delivery

Job description

Roles and Responsibilities

4+ years of hands-on implementation experience with CyberArk PAM or Delinea (Thycotic) Secret Server and Privilege Manager, including installation, configuration, and migration.

Proven work in designing policies, certifications/attestations, workflows, and custom connectors/integrations for PAM.

Proficiency deploying and configuring:

• CyberArk: Vault, PVWA, CPM, PSM, PTA, platforms, connection components, plugins. (or)
• Delinea: Secret Server (on-prem/cloud), Connection Manager, Distributed Engines/Scanners, Session launchers, Password management connectors, Privilege Manager (endpoint elevation policies and application control).

Strong knowledge of account/service discovery, auto-onboarding, password/SSH key rotation, and task scheduling across both platforms.

Experience managing access to Windows, Unix/Linux, web portals, and RDP/Citrix published applications.

Automation and scripting with at least one: Python, PowerShell, or Shell; solid use of REST APIs and SDKs. AutoIT or equivalent for connector customization is a plus.

Ability to create custom scanners and custom reporting in Delinea.

Understanding of DevOps concepts: provisioning from scratch, service setup, and CI/CD integrations for secrets management and credential injection.

Familiarity with HA/DR architecture, certificates/TLS/PKI, load balancers, and enterprise hardening standards. Strong documentation, stakeholder management, and Agile delivery skills (backlog management, sprint ceremonies, UAT facilitation).