Job
Description
About The Role
Project Role :Security Architect
Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :BeyondTrust Privileged Access Management
Good to have skills :NA
Minimum 7.5 year(s) of experience is required
Educational Qualification :15 years full time education
Summary:We are looking for a seasoned BeyondTrust Implementation Engineer with 5 to 10 years of experience in enterprise cybersecurity, particularly in Privileged Access Management (PAM) implementation. The ideal candidate will have hands-on expertise in designing, deploying, integrating, and optimizing BeyondTrust PAM solutions, with deep understanding of enterprise IT landscapes, security architecture, and regulatory compliance requirements.This is a technical, client-facing role requiring strong analytical, communication, and project management skills to drive PAM solution rollouts and ensure they align with the clients security objectives and business processes.Roles & Responsibilities:Lead the full lifecycle of BeyondTrust deployments, including requirement gathering, environment assessment, design, deployment, testing, go-live, and support.Configure and customize BeyondTrust products such as:oPassword Safe:secure credential storage, automated password rotation, credential injection.oPrivilege Management for Windows/Mac/Unix:application control, policy-based least privilege.oSecure Remote Access / Remote Support:secure vendor and internal access.Develop and enforce custom policies and rules for privilege elevation, whitelisting, blacklisting, and session monitoring.Design scalable and secure PAM architectures tailored to enterprise environments (on-premise, hybrid, cloud).Integrate BeyondTrust with IT ecosystems:oActive Directory / LDAP / Azure ADoSIEM (e.g., Splunk, QRadar)oITSM (e.g., ServiceNow, BMC Remedy)oMFA / SSO solutions (e.g., Okta, Duo, Ping)oVaulting of SSH Keys, API Keys, and Cloud SecretsAutomate BeyondTrust tasks and integrations using:oPowerShell, Bash, Python, or RESTful APIsBuild custom connectors or plug-ins for third-party tools.Implement RBAC (Role-Based Access Control) for administrators, auditors, and users.Establish password rotation schedules, check-in/check-out rules, and approval workflows.Enable session recording, keystroke logging, and real-time session termination features.Conduct user acceptance testing (UAT) and performance tuning post-deployment.Produce high-quality deliverables:HLD, LLD, implementation runbooks, migration plans, SOPs, rollback procedures.Conduct hands-on training and knowledge transfer sessions for admins and security teams.Assist with creation of audit and compliance reports related to privileged access.Act as Level 3 escalation point for PAM-related incidents and service disruptions.Diagnose and resolve complex issues involving PAM platform, connectors, and integrations.Provide post-deployment support including system health checks, hotfixes, and version upgrades.Professional & Technical
Skills:
Minimum 5 years of experience in cybersecurity/IT infrastructure with 3+ years dedicated to BeyondTrust PAM products.In-depth experience in implementing BeyondTrust Password Safe, Privilege Management for Endpoints, and Secure Remote Access.Strong working knowledge of:oAuthentication protocols (Kerberos, LDAP, RADIUS, SAML, OAuth)oOperating systems:Windows Server, Linux/UnixoEnterprise directories:AD, Azure ADoNetworking basics and firewall conceptsProficiency in scripting:PowerShell, Python, BashFamiliarity with regulatory and security standards:ISO 27001, NIST, GDPR, HIPAA, SOXHands-on experience with ITSM and ticketing platforms for automation and integration.Excellent verbal and written communication, interpersonal, and customer-facing skills.
Additional Information:- 5 or more years experience implementing and performing integrations with BeyoundTrust.- This position is based at our Bengaluru, Chennai,Pune,Hyderabad, Gurugaon- A 15-year full time education is required Qualification 15 years full time education
