As the AVP, Endpoint Privileged Access Engineer, you will lead the implementation and governance of privileged access controls on Windows and macOS endpoints using Delinea Privilege Manager. Your work will focus on enforcing least-privilege principles to eliminate standing administrative rights, ensuring systems remain secure without disrupting user productivity.
Key Responsibilities
- Manage and refine Delinea Privilege Manager policies to control privilege elevation, application execution, and delegated access across enterprise endpoints.
- Develop secure access models that balance operational needs with risk reduction, minimizing unnecessary admin rights.
- Collaborate with endpoint, security, and application teams to onboard new use cases and resolve policy conflicts that impact business workflows.
- Investigate and resolve privilege elevation failures, ensuring timely support for critical operations.
- Monitor privileged activity to detect policy gaps, non-compliant configurations, or risky behaviors, and lead remediation efforts.
- Help scale and standardize access controls to meet growing enterprise demands and address capacity limitations.
- Maintain clear documentation for policies, troubleshooting procedures, and operational runbooks.
- Provide on-call support for urgent incidents involving endpoint privilege access.
Qualifications
Applicants must have hands-on experience with Delinea Privilege Manager in large-scale Windows and macOS environments. A solid grasp of endpoint security, elevation workflows, and application control models is essential. You should also have experience working in regulated environments with strict compliance requirements around access control and auditability.
Strong communication and collaboration skills are necessary to work effectively across technical teams. The role requires the ability to prioritize in a fast-paced setting and adapt to evolving enterprise needs. Candidates must be flexible with travel and available for after-hours support when needed.
Applicants must be 18 or older, possess a high school diploma or equivalent, and be legally authorized to work in the U.S. This role requires passing a background check, fingerprinting, and a drug test. Compliance with Section 19 of the Federal Deposit Insurance Act is mandatory.
Work Environment
This is a hybrid role based in CA, NY Metro, or Seattle. Employees can work remotely near a company hub or from an office, with required in-person attendance for team meetings, training, and culture events. The organization supports flexible work arrangements and provides accommodations for applicants and employees with disabilities.
Compensation and Benefits
The annual salary range is $100,000 to $170,000, adjusted for local markets in CA, NY Metro, and Seattle. An annual bonus is awarded based on individual and company performance. The company fosters an inclusive culture that values diverse perspectives, with over half the workforce engaged in Employee Resource Groups. Recognition programs and a commitment to equity support a strong, award-winning workplace environment.
