Security PAM Engineer

66degrees; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

66degrees seeks an experienced IAM Engineer specializing in Delinea Secret Server to lead the design, configuration, and deployment of the Account Lifecycle Management engine.

You will architect automated lifecycle workflows, integrate Delinea with Active Directory and vault environments, and govern privileged service accounts. A 6-month contract with strong potential for full-time conversion based on milestones.

Qualifications

• 5+ years of progressive experience in Information Security with a specialized focus on Identity & Access Management (IAM) and Privileged Access Management (PAM).
• 3+ years of hands-on technical experience deploying, configuring, and administering Delinea Secret Server.
• Proven track record implementing Delinea Account Lifecycle Management (ALM) or equivalent privileged service account governance modules.
• Deep technical proficiency with Active Directory (AD) architecture, LDAP/Kerberos protocols, group policies, and service principal/service account administration.
• Strong background integrating PAM vaults with enterprise directory services, SIEM platforms, and infrastructure endpoints.
• Experience authoring structured technical documentation, including as-built architectures, SOPs, and operational runbooks.
• Strong diagnostic, troubleshooting, and stakeholder communication skills, with the ability to lead technical pilots through to enterprise-wide rollout.

Responsibilities

• ALM Architecture & Engine Configuration: Deploy, configure, and optimize the Delinea Secret Server Account Lifecycle Management (ALM) engines according to enterprise security standards.
• Directory & Vault Integration: Connect and synchronize ALM workflows with on-premises/hybrid Active Directory and existing secret vaults.
• Pilot lifecycle management program for an initial cohort of 10 service accounts; scale to 25 post-pilot.
• Establish end-to-end automated workflows for account creation, rotation, elevation, discovery, and de-provisioning.
• Develop comprehensive technical documentation, including architectural as-builts and runbooks; support handover to Tier 2/3 teams.
• Collaborate with security, IAM and systems engineering to ensure compliance and minimal business disruption.

Skills

IAM / PAM

Delinea Secret Server

Active Directory

LDAP / Kerberos

PAM integration

Documentation

Stakeholder communication

Job description

66degrees is an end-to-end AI transformation partner that guides enterprises from complex business challenges to clear, quantifiable outcomes. Our company is the culmination of several successful firms, each a leader in its own right in cloud, artificial intelligence, and data. This convergence of talent and expertise is how we help businesses reach their own "inflection point," where chaotic data becomes a strategic asset, complexity becomes clarity, and AI becomes an engine for growth. Our ultimate vision is to be the catalyst for a future where every business operates as an intelligent enterprise, with autonomous systems unlocking human potential.

At 66degrees, we believe in thriving through challenges and winning together. These values not only guide us in achieving our goals as a company but also for our people. We are dedicated to creating a significant impact for our employees by fostering a culture that sparks innovation and supports professional and personal growth along the way.

Overview of Role

We are seeking an experienced Identity and Access Management (IAM) Engineer specializing in Delinea Secret Server to lead the design, configuration, and implementation of our Account Lifecycle Management (ALM) engine.

In this role, you will be responsible for architecting and deploying automated account lifecycle workflows, integrating Delinea with our Active Directory and existing vault environments, operationalizing privileged service account governance, and any additional PAM work needed. This is an initial 6-month contract engagement with strong potential for full‑time conversion based on performance and milestone achievements.

Responsibilities

• ALM Architecture & Engine Configuration: Deploy, configure, and optimize the Delinea Secret Server Account Lifecycle Management (ALM) engines according to enterprise security standards.
• Directory & Vault Integration: Connect and synchronize ALM workflows with our on‑premises/hybrid Active Directory environment and ensure seamless integration with our existing secret vault architecture.
• Design, execute, and validate a pilot lifecycle management program for an initial cohort of 10 critical service accounts.
• Rapidly scale and onboard an additional 25 service accounts post‑pilot to establish a durable, automated lifecycle management foundation.
• Lifecycle Governance & Automation: Establish end‑to‑end automated workflows for service account creation, credential rotation, privileged elevation, discovery, and de‑provisioning.
• Documentation & Operational Handover: Develop and deliver comprehensive technical documentation, including architectural as‑builts, configuration guides, operational runbooks, and Tier 2/Tier 3 support handover materials.
• Stakeholder Collaboration & Best Practices: Partner closely with internal security, IAM, and systems engineering teams to ensure compliance, privileged access auditability, and minimal disruption to business operations.

Qualifications

• 5+ years of progressive experience in Information Security with a specialized focus on Identity & Access Management (IAM) and Privileged Access Management (PAM).
• 3+ years of hands‑on technical experience deploying, configuring, and administering Delinea Secret Server.
• Proven track record implementing Delinea Account Lifecycle Management (ALM) or equivalent privileged service account governance modules.
• Deep technical proficiency with Active Directory (AD) architecture, LDAP/Kerberos protocols, group policies, and service principal/service account administration.
• Strong background integrating PAM vaults with enterprise directory services, SIEM platforms, and infrastructure endpoints.
• Experience authoring structured technical documentation, including as‑built architectures, SOPs, and operational runbooks.
• Strong diagnostic, troubleshooting, and stakeholder communication skills, with the ability to lead technical pilots through to enterprise‑wide rollout.

Please note, we cannot sponsor or transfer any visas, of any kind, at this time.

66degrees is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to actual or perceived race, color, religion, sex, gender, gender identity, national origin, age, weight, height, marital status, sexual orientation, veteran status, disability status or other legally protected class.

AI Transparency & Disclosure

As an AI transformation partner, 66degrees leverages intelligent solutions to enhance our recruitment experience. We utilize AI tools—including LinkedIn Recruiter’s Hiring Assistant and interview transcription technologies—to assist with sourcing, role analysis, and capturing interview highlights.

These tools augment our process, but we "Commit to Our Craft" by ensuring all final hiring decisions are made by our human Talent Team. By applying, you acknowledge the use of these technologies to help us "Win Together" in finding the best fit for our team.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in 66degrees’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.