PAM Implementation Engineer (1099 Hourly Contract)

Airitos LLC is delivering a Delinea privileged access management implementation for a global manufacturing client. The contract engineer will build and configure PAM infrastructure, onboard privileged accounts, integrate session controls and monitoring, and support operational handoff.

Responsibilities:

• Deploy and configure core Delinea infrastructure (Secret Server and supporting components) across both forests, including web/application and database tiers, distributed engines for segmented connectivity, and certificate-based trust between systems
• Discover, import, and vault privileged accounts and non-human identities; configure automated password rotation policies; establish and test break-glass emergency access procedures
• Configure privileged session brokering, session recording with defined retention, and least-privilege enforcement for critical systems and applications
• Build just-in-time access workflows tied to ServiceNow approval
• Integrate PAM session and audit activity with Microsoft Sentinel; configure alerting
• Support integration design and build for Azure and development tooling connectivity
• Track and report onboarding volume and pace as the account universe is brought under management
• Produce operational runbooks, contribute to knowledge transfer, and support training and handoff to client staff

Requirements:

• Hands-on Delinea implementation experience, specifically Delinea Secret Server (vault architecture, secret templates, rotation, discovery) and the Delinea Platform
• Working knowledge of Delinea components including Distributed Engines, Connection Manager, session recording/monitoring, and Privilege Manager
• Strong Windows Server and Active Directory background, including multi-forest environments; familiarity with Microsoft Entra ID
• Experience onboarding privileged accounts and configuring rotation policies at scale (thousands of accounts)
• PKI and certificate management, network segmentation concepts, and firewall-aware deployment across distributed sites
• Scripting and automation with PowerShell and REST APIs
• Experience integrating PAM tooling with a SIEM (syslog/CEF) and with an ITSM platform for approval workflows
• Practical understanding of tiered administration (Tier 0 through Tier 3), the Microsoft Enterprise Access Model, just-in-time access, and least privilege
• Delinea certification (Secret Server / Platform)
• Experience implementing PAM across disconnected or untrusted multi-forest AD environments
• Familiarity with non-human identity and secrets management (service accounts, service principals, DevOps secrets)
• Azure and AWS exposure; awareness of Entra PIM and how it interacts with a PAM deployment
• ServiceNow workflow integration experience
• Awareness of regional privacy considerations for session recording
• Experience producing operational runbooks and transitioning day-to-day ownership to a client operations team