Onsite
Role Summary/Purpose:
We are looking for a highly skilled PAM Engineer with proven experience in Delinea Secret Server, Server Suite, and Delinea Just Enough Privilege (JEP) to manage and enhance our privileged access management infrastructure. This role involves installing, configuring, and maintaining PAM platforms; integrating a variety of IT systems—including databases, ServiceNow, and network devices—with the PAM vault; and supporting secure credential management processes.
Responsibilities expand this role to include technical leadership, strategic support, and guidance across the PAM program. The ideal candidate will serve as a technical leader who supports and mentors engineers, influences PAM roadmap direction, drives standardization and automation, and partners with stakeholders to ensure PAM capabilities align to enterprise security and business objectives.
Essential Responsibilities:
Engineering & Operations
Install, configure, and maintain Delinea Secret Server, Server Suite, platform components, and Delinea Just Enough Privilege (JEP).
Integrate various IT systems, applications, and network devices with the PAM vault, including databases and ServiceNow.
Support the management, vaulting, and rotation of privileged credentials across integrated platforms.
Work with out-of-the-box PAM integrations and customize where necessary to meet business requirements.
Troubleshoot PAM system issues, perform root cause analysis, and implement timely resolutions.
Manage and submit firewall requests related to PAM system connectivity and functionality.
Collaborate with network, security, and application teams to ensure seamless PAM integration and compliance.
Provide on-call support for PAM system availability, promptly responding to incidents and outages.
Monitor PAM system health, apply patches and upgrades, and optimize performance.
Document system configurations, integrations, procedures, and incident resolution reports.
Technical Leadership, Strategic Vision & Guidance
Serve as a technical leader for PAM engineering, providing guidance, oversight, and technical direction to engineers supporting Delinea platforms and integrations.
Partner with security leadership and stakeholders to support the PAM strategic vision, roadmap planning, and prioritization of enhancements aligned to enterprise risk reduction and business needs.
Lead design and review of complex PAM solutions, including architecture decisions, patterns/standards, and integration approaches across infrastructure and applications.
Drive standardization and operational maturity (e.g., onboarding patterns, credential rotation standards, JEP policy conventions, break-glass processes, and audit readiness).
Identify opportunities for automation and self-service, improving onboarding speed, reducing manual effort, and increasing reliability (e.g., workflow integrations with ServiceNow, scripting, API-based automation).
Lead or support major initiatives such as platform upgrades, migrations, new capability rollouts, and resilience improvements (HA/DR, monitoring strategy, capacity planning).
Provide technical mentorship through code/config reviews, troubleshooting support, knowledge sharing, and development of runbooks and engineering playbooks.
Own and improve key operational outcomes such as SLA/SLO performance, incident reduction, root cause remediation, and continuous improvement backlog management.
Support security and compliance needs by ensuring PAM implementations meet policy requirements and are prepared for audit and reporting expectations.
Perform other duties and/or special projects as assigned.
Qualifications/Requirements:
Bachelor's degree in Information Technology, Cybersecurity, or a related discipline is preferred; in lieu of a degree, minimum 8 years of relevant experience will be considered.
6+ years of experience in cybersecurity, with depth in Identity & Access Management (IAM) and security controls, including one or more of: Privileged Access Management (PAM), SSO, MFA, CIAM, RBAC, and/or directory governance.
Proven experience with Delinea Secret Server, Server Suite, Delinea Just Enough Privilege (JEP), and related PAM platforms.
Hands-on experience integrating diverse solutions (databases, ServiceNow, network devices) with PAM vaults.
Strong knowledge of privileged credential lifecycle management and security best practices.
Demonstrated ability to provide technical leadership (leading designs, mentoring engineers, setting standards, influencing decisions).
Experience driving or supporting roadmap planning, cross-team prioritization, and execution of complex technical initiatives.
Familiarity with out-of-the-box PAM integrations and customization capabilities.
Experience managing firewall requests and collaborating with infrastructure teams.
Comfortable with crafting and editing:
- PowerShell (preferred/primary): Build and maintain automation for Delinea/Secret Server use cases, including REST API integration, JSON/data handling, modular scripting, logging, and robust error handling.
- SQL (basic to intermediate): Support reporting and data analysis needs; familiarity with querying for operational/audit insights (API-first approach when applicable).
- Linux/Bash: Ability to automate administrative tasks on Linux systems (SSH, sudo, cron, file permissions).
Willingness and availability to participate in on-call rotations for after-hours support.
Excellent troubleshooting, problem-solving, and communication skills.
Ability to work effectively across technical teams and stakeholders.
Ability and flexibility to travel for business as required
Grade/Level: 12
The salary range for this position is 135,000.00 - 230,000.00 USD Annual and is eligible for an annual bonus based on individual and company performance.
Actual compensation offered within the posted salary range will be based upon work experience, skill level or knowledge.
Salaries are adjusted according to market in CA, NY Metro and Seattle.
Our Way of Working:
We’re proud to offer you flexibility. At Synchrony, our way of working allows you to have the option to work from home near one of our Hubs or come into one of our offices. You will be required to commute to your nearest Hub (either virtual or physical) for in-person engagement activities such as regular business or team meetings, training and culture events.
*Field Sales and some Commercial team roles may have varied location requirements based upon partner obligations or preferences.
Eligibility Requirements:
You must be 18 years or older
You must have a high school diploma or equivalent
You must be willing to take a drug test, submit to a background investigation and submit fingerprints as part of the onboarding process
You must be able to satisfy the requirements of Section 19 of the Federal Deposit Insurance Act.
New hires (Level 4-7) must have 9 months of continuous service with the company before they are eligible to post on other roles. Once this new hire time in position requirement is met, the associate will have a minimum 6 months’ time in position before they can post for future non-exempt roles. Employees, level 8 or greater, must have at least 18 months’ time in position before they can post. All internal employees must consistently meet performance expectations and have approval from your manager to post (or the approval of your manager and HR if you don’t meet the time in position or performance expectations).
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.
Our Commitment:
When you join us, you’ll be part of an inclusive culture where your individual skills, experience, and voice are not only heard – but valued. Together, we’re building a future where we can all belong, connect, and turn ideals into action. More than 50% of our workforce is engaged in our Employee Resource Groups (ERGs), where community and passion intersect to offer a safe space to learn and grow.
This starts when you choose to apply for a role at Synchrony. We ensure all qualified applicants will receive consideration for employment without regard to age, race, color, religion, gender, sexual orientation, gender identity, national origin, disability, or veteran status. We’re proud to have an award-winning culture for all.
Reasonable Accommodation Notice:
Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.
If you need special accommodations, please call our Career Support Line so that we can discuss your specific situation. We can be reached at 1-866-301-5627. Representatives are available from 8am – 5pm Monday to Friday, Central Standard Time
Job Family Group:
Information TechnologyWant to know if this job is worth applying to?