Job Description

Project Role :

Security Architect

Project Role Description :

Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills :

BeyondTrust Privileged Access Management

Good to have skills :

NA

Minimum

7.5

year(s) of experience is required

Educational Qualification :

15 years full time education



Summary: We are looking for a seasoned BeyondTrust Implementation Engineer with 5 to 10 years of experience in enterprise cybersecurity, particularly in Privileged Access Management (PAM) implementation. The ideal candidate will have hands-on expertise in designing, deploying, integrating, and optimizing BeyondTrust PAM solutions, with deep understanding of enterprise IT landscapes, security architecture, and regulatory compliance requirements. This is a technical, client-facing role requiring strong analytical, communication, and project management skills to drive PAM solution rollouts and ensure they align with the client's security objectives and business processes. Roles & Responsibilities: o Lead the full lifecycle of BeyondTrust deployments, including requirement gathering, environment assessment, design, deployment, testing, go-live, and support. o Configure and customize BeyondTrust products such as: o Password Safe: secure credential storage, automated password rotation, credential injection. o Privilege Management for Windows/Mac/Unix: application control, policy-based least privilege. o Secure Remote Access / Remote Support: secure vendor and internal access. o Develop and enforce custom policies and rules for privilege elevation, whitelisting, blacklisting, and session monitoring. o Design scalable and secure PAM architectures tailored to enterprise environments (on-premise, hybrid, cloud). o Integrate BeyondTrust with IT ecosystems: o Active Directory / LDAP / Azure AD o SIEM (e.g., Splunk, QRadar) o ITSM (e.g., ServiceNow, BMC Remedy) o MFA / SSO solutions (e.g., Okta, Duo, Ping) o Vaulting of SSH Keys, API Keys, and Cloud Secrets o Automate BeyondTrust tasks and integrations using: o PowerShell, Bash, Python, or RESTful APIs o Build custom connectors or plug-ins for third-party tools. o Implement RBAC (Role-Based Access Control) for administrators, auditors, and users. o Establish password rotation schedules, check-in/check-out rules, and approval workflows. o Enable session recording, keystroke logging, and real-time session termination features. o Conduct user acceptance testing (UAT) and performance tuning post-deployment. o Produce high-quality deliverables: HLD, LLD, implementation runbooks, migration plans, SOPs, rollback procedures. o Conduct hands-on training and knowledge transfer sessions for admins and security teams. o Assist with creation of audit and compliance reports related to privileged access. o Act as Level 3 escalation point for PAM-related incidents and service disruptions. o Diagnose and resolve complex issues involving PAM platform, connectors, and integrations. o Provide post-deployment support including system health checks, hotfixes, and version upgrades. Professional & Technical Skills: o Minimum 5 years of experience in cybersecurity/IT infrastructure with 3+ years dedicated to BeyondTrust PAM products. o In-depth experience in implementing BeyondTrust Password Safe, Privilege Management for Endpoints, and Secure Remote Access. o Strong working knowledge of: o Authentication protocols (Kerberos, LDAP, RADIUS, SAML, OAuth) o Operating systems: Windows Server, Linux/Unix o Enterprise directories: AD, Azure AD o Networking basics and firewall concepts o Proficiency in scripting: PowerShell, Python, Bash o Familiarity with regulatory and security standards: ISO 27001, NIST, GDPR, HIPAA, SOX o Hands-on experience with ITSM and ticketing platforms for automation and integration. o Excellent verbal and written communication, interpersonal, and customer-facing skills. Additional Information: - 5 or more years' experience implementing and performing integrations with BeyoundTrust. - This position is based at our Bengaluru, Chennai,Pune,Hyderabad, Gurugaon - A 15-year full time education is required




15 years full time education