Responsibilities
- Lead the architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions aligned with business and security requirements.
- Serve as the technical design authority, translating requirements into scalable and secure solution architectures.
- Lead discovery, requirements analysis, solution design, technical planning, and architecture documentation.
- Design integrations between BeyondTrust platforms and IAM/IGA, authentication, directory, cloud, infrastructure, application, and security platforms.
- Define BeyondTrust PAM architecture for privileged accounts, service/application accounts, credential management, session management, access controls, and privileged-user lifecycle.
- Assess existing environments, identify security and architecture gaps, and define target-state designs and implementation roadmaps.
- Establish PAM architecture standards, security controls, integration patterns, and technical policies.
- Provide architectural leadership for BeyondTrust PAM technologies.
- Partner with security, IAM, cloud, infrastructure, and application teams to ensure effective enterprise integration.
- Provide technical leadership and design oversight to engineers and implementation teams.
- Advise client and senior stakeholders on architecture decisions, risks, dependencies, and recommended approaches.
- Contribute reusable patterns, standards, and best practices to the PAM/IAM Center of Excellence.
Required Skills
- 8+ years of IT experience, with significant experience in architecting and implementing BeyondTrust solutions across the entire suite including PWS, PRA, EPM, PMUL, Entitle, and Insights.
- Deep understanding of privileged access, credential management, session management, least privilege, access controls, and privileged identity governance.
- Experience integrating PAM with IAM/IGA, directories, authentication platforms, cloud services, SIEM, and enterprise infrastructure.
- Experience developing solution architectures, integration designs, deployment models, and technical roadmaps.
- Strong analytical, troubleshooting, stakeholder communication, and technical leadership skills.
Preferred
- BeyondTrust Certified Implementation Engineer (BCIE) Advanced
- BeyondTrust Certified Password Safe Administration, Advanced
- BeyondTrust Certified Privileged Remote Access Administration
- BeyondTrust Certified Endpoint Privilege Management Win/ Mac Administration