Project Role :
Security Architect
Project Role Description :
Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :
BeyondTrust Privileged Access Management
Good to have skills :
NA
Minimum 7.5 Year(s) Of Experience Is Required
Educational Qualification :
15 years full time educationSummary: We are looking for a seasoned BeyondTrust Implementation Engineer with 5 to 10 years of experience in enterprise cybersecurity, particularly in Privileged Access Management (PAM) implementation. The ideal candidate will have hands-on expertise in designing, deploying, integrating, and optimizing BeyondTrust PAM solutions, with deep understanding of enterprise IT landscapes, security architecture, and regulatory compliance requirements. This is a technical, client-facing role requiring strong analytical, communication, and project management skills to drive PAM solution rollouts and ensure they align with the client’s security objectives and business processes. Roles & Responsibilities:
- Lead the full lifecycle of BeyondTrust deployments, including requirement gathering, environment assessment, design, deployment, testing, go-live, and support.
- Configure and customize BeyondTrust products such as: o Password Safe: secure credential storage, automated password rotation, credential injection. o Privilege Management for Windows/Mac/Unix: application control, policy-based least privilege. o Secure Remote Access / Remote Support: secure vendor and internal access.
- Develop and enforce custom policies and rules for privilege elevation, whitelisting, blacklisting, and session monitoring.
- Design scalable and secure PAM architectures tailored to enterprise environments (on-premise, hybrid, cloud).
- Integrate BeyondTrust with IT ecosystems: o Active Directory / LDAP / Azure AD o SIEM (e.g., Splunk, QRadar) o ITSM (e.g., ServiceNow, BMC Remedy) o MFA / SSO solutions (e.g., Okta, Duo, Ping) o Vaulting of SSH Keys, API Keys, and Cloud Secrets
- Automate BeyondTrust tasks and integrations using: o PowerShell, Bash, Python, or RESTful APIs
- Build custom connectors or plug-ins for third-party tools.
- Implement RBAC (Role-Based Access Control) for administrators, auditors, and users.
- Establish password rotation schedules, check-in/check-out rules, and approval workflows.
- Enable session recording, keystroke logging, and real-time session termination features.
- Conduct user acceptance testing (UAT) and performance tuning post-deployment.
- Produce high-quality deliverables: HLD, LLD, implementation runbooks, migration plans, SOPs, rollback procedures.
- Conduct hands-on training and knowledge transfer sessions for admins and security teams.
- Assist with creation of audit and compliance reports related to privileged access.
- Act as Level 3 escalation point for PAM-related incidents and service disruptions.
- Diagnose and resolve complex issues involving PAM platform, connectors, and integrations.
- Provide post-deployment support including system health checks, hotfixes, and version upgrades. Professional & Technical Skills:
- Minimum 5 years of experience in cybersecurity/IT infrastructure with 3+ years dedicated to BeyondTrust PAM products.
- In-depth experience in implementing BeyondTrust Password Safe, Privilege Management for Endpoints, and Secure Remote Access.
- Strong working knowledge of: o Authentication protocols (Kerberos, LDAP, RADIUS, SAML, OAuth) o Operating systems: Windows Server, Linux/Unix o Enterprise directories: AD, Azure AD o Networking basics and firewall concepts
- Proficiency in scripting: PowerShell, Python, Bash
- Familiarity with regulatory and security standards: ISO 27001, NIST, GDPR, HIPAA, SOX
- Hands-on experience with ITSM and ticketing platforms for automation and integration.
- Excellent verbal and written communication, interpersonal, and customer-facing skills. Additional Information: - 5 or more years’ experience implementing and performing integrations with BeyoundTrust. - This position is based at our Bengaluru, Chennai,Pune,Hyderabad, Gurugaon - A 15-year full time education is required