Delinea PAM Architect

Veriipro; Richardson (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Veriipro is seeking a senior PAM architect to lead architecture and migration efforts for Delinea Secret Server, DSV, and Connection Manager. You will design PAM models, RBAC policies, and privileged workflows while guiding offshore teams and coordinating with client PAM groups.

The role requires extensive experience with CyberArk, Delinea products, and integration with ITSM/IAM/SIEM tools, plus scripting and REST API capabilities. Strong communication with executives is essential.

Qualifications

• Proven hands-on experience with Delinea Secret Server (Cloud and On-Prem).
• Experience with Delinea DevOps Secrets Vault (DSV) and related tools.
• Deep knowledge of CyberArk PAM and migration practices.
• Led PAM migrations, platform transformations, and enterprise security projects.
• Strong authentication/identity protocol knowledge (SSO, SAML, OAuth, OIDC, LDAP, RADIUS, SCIM).
• Experience integrating PAM with ITSM/IAM/SIEM (ServiceNow, SailPoint/Saviynt, Splunk, ArcSight).
• REST API, PowerShell automation, and scripting expertise.
• Cloud security across Azure/AWS, Kubernetes, and DevOps environments.

Responsibilities

• Lead architecture and solution design for Delinea products (Secret Server, Connection Manager, DSV).
• Define migration strategy from CyberArk to Delinea with cutover plans and risk mitigation.
• Design PAM security models incl. Safe-to-Folder mapping, RBAC, privileged workflows.
• Architect integrations with AD/LDAP, RADIUS, SailPoint, Saviynt, ServiceNow, Splunk, ArcSight, Okta, Entra ID.
• Provide leadership to offshore Delinea implementation and automation teams.
• Conduct architecture reviews, security assessments, and executive workshops.
• Collaborate with client PAM teams and Delinea services for delivery success.
• Define automation approaches using REST APIs, PowerShell, and scripting.
• Support cloud/security initiatives with Azure, AWS, Kubernetes, and secrets management.

Skills

Delinea Secret Server

Delinea DevOps Secrets Vault (DSV)

CyberArk PAM

PAM migrations

REST APIs

PowerShell automation

RBAC and PAM workflows

SSO/SAML/OIDC/LDAP/RADIUS/SCIM

ServiceNow integration

Splunk/ArcSight

Okta/Microsoft Entra ID

Azure/AWS

Kubernetes

Tools

ServiceNow

SailPoint

Saviynt

Splunk

ArcSight

Okta

Microsoft Entra ID

Delinea Secret Server

Job description

Roles and Responsibilities

• Lead architecture and solution design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault (DSV).


• Define and execute CyberArk-to-Delinea migration strategy, including migration waves, cutover planning, rollback procedures, and risk mitigation.


• Design PAM security models including Safe-to-Folder mapping, RBAC, privileged access workflows, password rotation policies, and session recording.


• Architect integrations with enterprise platforms including Active Directory/LDAP, RADIUS, SailPoint, Saviynt, ServiceNow, Splunk, ArcSight, Okta, and Microsoft Entra ID.


• Provide technical leadership and guidance to offshore Delinea implementation and automation teams.


• Conduct architecture reviews, security assessments, design validations, and executive/client workshops.


• Collaborate with client PAM teams and Delinea Professional Services to ensure successful transformation delivery.


• Define automation approaches using REST APIs, PowerShell, and scripting to streamline PAM operations.


• Support cloud and DevOps security initiatives involving Azure, AWS, Kubernetes, and secrets management solutions.

Required Skills

• Strong hands-on experience with Delinea Secret Server (Cloud and On-Premises).


• Experience with Delinea DevOps Secrets Vault (DSV), Connection Manager, and Discovery Engine.


• Extensive knowledge of CyberArk PAM solutions, including PAS, CPM, PSM, PSMP, AIM/AAM, and Conjur.


• Proven experience leading PAM migrations, platform transformations, and enterprise security implementations.


• Strong understanding of authentication and identity protocols including SSO, SAML, OAuth, OIDC, LDAP, RADIUS, and SCIM.


• Experience integrating PAM platforms with ITSM, IAM, and SIEM solutions such as ServiceNow, SailPoint/Saviynt, Splunk, and ArcSight.


• Strong experience with REST APIs, PowerShell automation, and scripting.


• Knowledge of cloud security and secrets management across Azure, AWS, Kubernetes, and DevOps environments.


• Excellent communication skills with experience working with technical teams, security stakeholders, and executive leadership.

Preferred Qualifications

• Experience designing enterprise-scale PAM architectures.


• Experience working with global teams and complex security transformation programs.


• Strong understanding of privileged identity lifecycle management and cybersecurity best practices.