BeyondTrust PAM - Cyber Operate

Work you will do

The key job responsibilities will be to:

• Perform advanced day-to-day administration and operational support for BeyondTrust Password Safe.
• Troubleshoot non-standard IAM and PAM issues, including incident, problem, and change activities.
• Lead onboarding of applications, servers, and privileged accounts into the BeyondTrust Password Safe platform.
• Configure and manage Password Safe features such as Smart Rules, Discovery, Assets, Directory Queries, Access Policies, and Password Policies.
• Build and support minor enhancements and integrations using APIs and standard platform capabilities.
• Lead routine platform releases, version upgrades, security patches, and hotfix implementation.
• Participate in CAB and change activities, including release validation and rollback coordination.
• Drive root cause analysis and follow-through for recurring production issues.
• Coordinate with internal teams and external vendors to resolve application and platform defects.
• Support session recording, logging, reporting, and operational controls across PAM-managed assets.
• Track SLA performance, operational metrics, and service quality for assigned modules.
• Create and maintain SOPs, runbooks, KB articles, and onboarding documentation.
• Lead incident communications and provide clear status updates to stakeholders across teams.
• Train junior team members and support knowledge transfer within the IAM/PAM operations team.

Qualifications and experience Required:

• B.Tech/M.Tech/MS/MBA
• Experience4 to 8 years
• Candidate should have overall 4+ years of experience implementing and managing BeyondTrust Password Safe projects, aligned to advanced operations and support responsibilities.
• Lead the onboarding process for new applications into the BeyondTrust Password Safe framework and ensure seamless integration of applications into the PAM environment.
• Possess the ability to onboard privileged accounts from a variety of platforms, including Linux/Unix, Windows, Databases and ESXIs etc.  into the Password Safe solution.
• Configuring and supporting existing environment integrations.
• Strong experience in advanced troubleshooting, log analysis, and issue resolution, including coordination with BeyondTrust support teams
• Provide expert guidance and support by understanding customer requirements and should have the ability to cater to complex requirements by adhering to PAM best practices, policies, and procedures.
• Experience in applying upgrades, patches, hotfixes, and supporting appliance deployment or migration activities
• Experience with ticketing workflows, incident/change/problem management, CAB participation, and operational governance
• Good understanding of LDAP, SQL, Windows, Linux, Active Directory, DNS, firewalls, VPN, PKI, and related security technologies
• Should have deep expertise in BeyondTrust Password Safe tools (Smart Rules, Discovery, Assets, Directory Queries, Access Policies and Password Policies) to configure, manage, and optimize privileged account management.
• Establish smart rules within Password Safe to facilitate role-based access for end users on managed servers.
• Leverage APIs to automate tasks, thereby contributing to scalability.
• Exhibit proficiency in setting up session recording and logging configurations.
• Manage various types of privileged accounts, such as service accounts, database accounts, application accounts within Password Safe.
• Implement application-based access control and isolation as required.
• Understand how to access the correct log files/reports and liaise with BeyondTrust Support when faced with issues.
• Exposure to PAM process frameworks and methodologies
• Experience in PRA and configuration of Jump technology to facilitate vendors to access internal systems without the need of a VPN.
• Advanced documentation and presentation skills and well-versed with software development life cycle processes
• Ability to create, plan, and execute advanced IAM trainings and independently drive proof of concepts involving emerging IAM technologies.
• Strong written and verbal communication skills with the ability to provide client-ready updates and documentation
• Participate in audits and provide necessary documentation to support compliance requirements.
• Create and maintain comprehensive documentation for PAM onboarding processes, configurations, and procedures.

Preferred:

• BeyondTrust Certified Implementation Engineer (BCIE) 
• Exposure to PRA, PowerBroker, EPM, or related BeyondTrust products
• PMP, CISSP certification, and exposure to other security domains