Lead Consultant

Job Summary

BeyondTrust Implementation

· Deploy, configure, and administer BeyondTrust solutions including Password Safe, Privileged Remote Access (PRA), Endpoint Privilege Management (EPM), Remote Support (as applicable), Session Monitoring and Recording,

· Implement role-based access controls, approval workflows, and privileged session policies.

· Configure password rotation, credential injection, session auditing, and account discovery.

· Perform upgrades, migrations, patching, and platform optimization.

· Lead onboarding of Windows Servers, Linux/Unix Servers, Databases, Network Devices, Application & Service Accounts, Cloud Platforms, DevOps and CI/CD Environments

· Integrate BeyondTrust with Active Directory, LDAP, Azure AD / Entra ID, SIEM Platforms (Splunk, QRadar, Sentinel), ITSM Tools (ServiceNow, BMC Remedy, Jira) and MFA Solutions.

· Develop automation solutions using PowerShell, Python, REST APIs or Shell Scripting

· Automate account onboarding, reporting, compliance validation, and operational activities.

· Design integrations with third-party security and infrastructure platforms.

· Perform security reviews, audits, and compliance assessments.

· Act as the technical lead and SME for BeyondTrust engagements.

· Mentor PAM engineers and administrators.

· Review solution designs and implementation deliverables.

· Provide guidance during troubleshooting, major incidents, and escalations.

· Lead customer workshops, architecture discussions, and governance reviews.

---

Required Technical Skills

BeyondTrust PAM

· Strong hands-on experience with:

o BeyondTrust Password Safe

o BeyondTrust Privileged Remote Access (PRA)

o Endpoint Privilege Management (EPM)

· Experience with discovery, onboarding, password management, session monitoring, and privileged access governance.

· Strong understanding of BeyondTrust architecture, deployment models, and best practices.

· Experience with HA/DR implementation and platform migrations.

· Advanced knowledge of Windows Server Administration, Linux/Unix Administration, VMware vSphere and Virtualized and Hybrid Environments

· Experience with Windows Clustering and enterprise infrastructure deployments.

---

Qualifications

· Bachelor’s degree in computer science, Information Technology, Cyber Security, or related field.

· 5+ years of BeyondTrust PAM implementation and architecture experience.

· Proven experience leading enterprise PAM deployments.

· Customer-facing implementation and consulting experience is mandatory.

Preferred Certifications

· BeyondTrust Certified Administrator

· BeyondTrust Certified Architect

· CISSP

· CISM

· Microsoft Azure Security Certifications

· Security+ or equivalent security certifications

Role Level: Architect / Senior Architect / Lead Consultant Domain: Privileged Access Management (PAM) | Identity & Access Management (IAM) | Cyber Security| BeyondTrust PAM Solutions 

Key Responsibilities

Key Responsibilities Solution Architecture & Design · Lead architecture, design, and implementation of BeyondTrust PAM solutions across enterprise environments. · Define PAM strategy, reference architecture, and onboarding roadmap aligned with security and compliance requirements. · Conduct discovery workshops and gather business, technical, and security requirements. · Design highly available, scalable, and secure PAM infrastructure. · Develop solution design documents (HLD, LLD), implementation plans, and migration strategies. · Strong customer-facing and consulting experience. · Excellent verbal and written communication skills. · Ability to engage with C-level stakeholders and security leadership teams. · Strong analytical, troubleshooting, and problem-solving skills. · Experience working in global delivery and onsite/offshore engagement models. · Ability to lead teams and manage multiple concurrent projects. · Willingness to travel based on project requirements. BeyondTrust Implementation · Deploy, configure, and administer BeyondTrust solutions including Password Safe, Privileged Remote Access (PRA), Endpoint Privilege Management (EPM), Remote Support (as applicable), Session Monitoring and Recording, · Implement role-based access controls, approval workflows, and privileged session policies. · Configure password rotation, credential injection, session auditing, and account discovery. · Perform upgrades, migrations, patching, and platform optimization. BeyondTrust Implementation · Deploy, configure, and administer BeyondTrust solutions including Password Safe, Privileged Remote Access (PRA), Endpoint Privilege Management (EPM), Remote Support (as applicable), Session Monitoring and Recording, · Implement role-based access controls, approval workflows, and privileged session policies. · Configure password rotation, credential injection, session auditing, and account discovery. · Perform upgrades, migrations, patching, and platform optimization. · Lead onboarding of Windows Servers, Linux/Unix Servers, Databases, Network Devices, Application & Service Accounts, Cloud Platforms, DevOps and CI/CD Environments · Integrate BeyondTrust with Active Directory, LDAP, Azure AD / Entra ID, SIEM Platforms (Splunk, QRadar, Sentinel), ITSM Tools (ServiceNow, BMC Remedy, Jira) and MFA Solutions. · Develop automation solutions using PowerShell, Python, REST APIs or Shell Scripting · Automate account onboarding, reporting, compliance validation, and operational activities. · Design integrations with third-party security and infrastructure platforms. · Perform security reviews, audits, and compliance assessments. · Act as the technical lead and SME for BeyondTrust engagements. · Mentor PAM engineers and administrators. · Review solution designs and implementation deliverables. · Provide guidance during troubleshooting, major incidents, and escalations. · Lead customer workshops, architecture discussions, and governance reviews. --- Required Technical Skills BeyondTrust PAM · Strong hands-on experience with: o BeyondTrust Password Safe o BeyondTrust Privileged Remote Access (PRA) o Endpoint Privilege Management (EPM) · Experience with discovery, onboarding, password management, session monitoring, a

Skill Requirements

Other Requirements