IT Secutity

• Implement PAM controls aligned with least privilege, Zero Trust, NIST, CIS, SOX, and internal security requirements.
• Support security assessments, audits, and PAM control testing.
• Identify privileged-access risks and drive technical remediation.
• Support management of PAM exceptions and compensating controls. Documentation & Knowledge Transfer
• Maintain architecture diagrams, technical documentation, SOPs, troubleshooting guides, and operational/DR runbooks.
• Provide knowledge transfer and technical guidance to L1/L2 engineers.
• Contribute technical recommendations to the PAM roadmap and continuous improvement initiatives.
• Required Technical Skills
• BeyondTrust Password Safe

Strong hands-on experience with:

• Managed Systems and Managed Accounts
• Account/System Discovery
• Smart Rules
• Access Policies
• Password Rotation and Reconciliation
• Privileged Session Management and Recording
• Application and System Onboarding
• Service/Functional Account Management
• REST APIs
• Reporting and Auditing
• Platform troubleshooting and upgrades Infrastructure & Identity

Strong working knowledge of:

• Windows and Linux
• Active Directory and Microsoft Entra ID
• LDAP/LDAPS
• DNS and PKI/Certificates
• Microsoft SQL Server
• Authentication and network connectivity concepts
• AWS/Azure environments Automation
• PowerShell and/or Python
• REST APIs
• Experience automating PAM onboarding and operational activities

Experience Requirements

• 7+ years of IT Security, Infrastructure, or IAM experience.
• 7+ years of PAM experience.
• 5+ years of recent hands-on BeyondTrust Password Safe engineering experience.
• Experience supporting enterprise-scale PAM environments.
• Demonstrated experience with privileged-account discovery, onboarding, troubleshooting, and risk remediation.

Preferred Certifications

• BeyondTrust certifications relevant to Password Safe
• Relevant IAM, security, Microsoft, or cloud certifications are advantageous