PAM Engineer

TEKsystems•Lake Forest, IL

4d•$50 - $60•Remote

About The Position

seeking a highly skilled Senior PAM & Identity Engineer to lead and mature our Privileged Access Management (PAM) and Identity Governance & Administration (IGA) ecosystem. This role is critical in advancing our mission to eliminate standing privileges, secure high‑value credentials, and strengthen governance across a complex hybrid environment. This position will support the Identity Access & Governance team, which includes developers and IAM SMEs.

Requirements

IAM
Delinea
Secret Server Cloud
Azure AD
Entra ID
PowerShell
Python
API

Nice To Haves

Background in software development or engineering-focused automation.
Experience with Saviynt for identity governance.
Demonstrated ability to operate at an L3+ level, lead complex troubleshooting efforts, and drive technical strategy.

Responsibilities

Lead the architecture, scaling, and administration of Delinea Secret Server Cloud, including Distributed Engines, Secret Policies, and enterprise workflows.
Design and implement secure credential management processes, including: ○ Heartbeat ○ Remote Password Changing (RPC) ○ Check‑out/check‑in ○ Service and root account rotation
Develop and enforce Least Privilege strategies within Delinea Privilege Manager, removing local admin rights while enabling required task elevation.
Manage integration and interoperability between Saviynt, Azure/Entra ID, and cloud control planes.
Configure and maintain Azure/Entra PIM including: ○ Just‑In‑Time (JIT) role activation ○ Conditional Access ○ Managed Identities
Support onboarding of non‑human identities and hundreds of business‑critical applications—many with legacy or static credentials requiring modernization and compliance alignment.
Develop automation using PowerShell or Python, including API integrations for secret lifecycle management and bulk operations.
Integrate PAM and IGA systems with: ○ Active Directory ○ SIEM platforms (e.g., Microsoft Sentinel) ○ ITSM platforms such as ServiceNow.