BeyondTrust PAM Engineer

Solution Design & Architecture

• Design, architect, and implement enterprise-scale BeyondTrust PRA solution.
• Define BeyondTrust PRA architecture, onboarding strategies, vaulting standards, and privileged access controls.
• Deploy, configure, and maintain the BeyondTrust Privileged Remote Access (PRA) appliance (physical, virtual, or cloud/SaaS) including sizing, failover, and high-availability setup.
• Configure and manage Jum points, Jump Clients, and Jump Item Roles to broker secure access to remote endpoints, servers, and network devices.
• Set up access pathways for RDP, SSH, VNC, Telnet, HTTP/HTTPS, and web-based application access through the PRA access console and web console.
• Create technical solution designs, integration architectures, and deployment blueprints.
• Lead PAM transformation and modernization initiatives across on-premises and cloud environments.

BeyondTrust PRA Implementation & Administration

• Deploy, configure, and manage:
• BeyondTrust Password Safe Integration with PRA (Privileged Remote Access)
• Privileged Remote Access (PRA)
• Endpoint Privilege Management (EPM)
• Session Monitoring and Recording
• BeyondInsight
• Discovery and Account Management components
• Configure password rotation policies, credential injection, and session controls.
• Implement least privilege and Zero Trust security principles.
• Implement time-based and approval-based access (access request/approval workflows) for just-in-time (JIT) privileged sessions.
• Onboard and manage internal users, vendor/third-party users, and service teams with appropriate access scoping.
• Perform platform upgrades, migrations, patch management, and health assessments.

Integration & Automation

• Integrate BeyondTrust PAM with:
• Active Directory / Azure AD / Entra ID
• LDAP
• RADIUS
• MFA solutions (Microsoft Authenticator, Duo, RSA, Okta, etc.)
• SIEM platforms (Microsoft Sentinel, Splunk, QRadar)
• ITSM tools (ServiceNow, Remedy)
• Cloud platforms (Azure, AWS, GCP)
• Develop automation using:
• PowerShell
• REST APIs
• Python
• Infrastructure-as-Code methodologies
• Implement automated onboarding and privileged account lifecycle processes.