Security Engineer, Privileged Access Management (PAM)

Marriott International•Bethesda, MD

55d

About The Position

We are seeking a skilled and motivated Privileged Access Management (PAM) Engineer with hands-on experience in Delinea Secret Server and Endpoint Privilege Manager (EPM). This role will focus on managing, maintaining, and enhancing our privileged access management environment to ensure secure credential management, least privilege enforcement, and compliance with enterprise security standards. Candidate will act as an intermediary for iT system administrators, service providers and application owners with the IAM organization.

Requirements

Bachelor's degree in Computer Sciences or related field or equivalent experience / certification
5 years' progressive technology engineering experience that includes:
3+ years of IT security or system administration experience
2+ years of hands-on experience with Delinea Secret Server (formerly Thycotic).
Experience with Delinea Endpoint Privilege Manager (EPM) for endpoint least privilege and application control.
Strong understanding of Windows Server, Active Directory, PowerShell, and basic networking concepts.
Knowledge of credential vaulting, password rotation, and privileged session management.

Nice To Haves

Relevant certifications such as Delinea Certified Engineer, CISSP, Security+, or Microsoft Certified: Security Operations Analyst Associate.
Experience integrating PAM tools with ServiceNow, Splunk, or other enterprise platforms.
Familiarity with automation/scripting (PowerShell, Python).
Demonstrated ability to work independently and with others in a matrixed, cross functional, large organization
Ability to multi-task in a fast-paced environment
Strong interpersonal, written, and verbal communication skills
Experience in researching emerging technologies and trends, standards, and products

Responsibilities

Manage, configure, and maintain Delinea Secret Server including vaults, folders, roles, and permissions.
Administer and maintain Delinea Endpoint Privilege Manager (EPM) policies for least privilege, application control, and endpoint elevation.
Monitor and troubleshoot PAM system performance, integrations, and connectivity issues.
Support the identification and remediation of security events.
Support onboarding of applications, systems, and service accounts into Secret Server.
Integrate PAM solutions with Active Directory, SIEM, ticketing systems, and other enterprise tools.
Implement and maintain password rotation policies, discovery scans, and privileged account lifecycle management.
Enforce privileged access policies and ensure compliance with internal and regulatory security requirements.
Support audits and provide evidence or reporting related to PAM controls.
Identify and remediate security gaps or misconfigurations within the PAM ecosystem.
Work closely with Infrastructure, Security, and Application teams to onboard and manage privileged accounts.
Create and maintain documentation, runbooks, and standard operating procedures.
Provide user training and technical guidance to IT staff.
Manages and implements work and projects as assigned.
Generates and provides accurate and timely results in the form of reports, presentations, etc.
Analyzes information and evaluates results to choose the best solution and solve problems.
Provides timely, accurate, and detailed status reports as requested.
Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner.
Demonstrates self confidence, energy and enthusiasm.
Informs and/or updates leaders on relevant information in a timely manner.
Manages time effectively and conducts activities in an organized manner.
Presents ideas, expectations and information in a concise, organized manner.
Uses problem solving methodology for decision making and follow up.
Performs other reasonable duties as assigned by manager.