Security Architect

Project Role :Security Architect


Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :BeyondTrust Privileged Access Management

Good to have skills :NA
Minimum 7.5 year(s) of experience is required

Educational Qualification :15 years full time education

Summary:
We are seeking a hands-on Senior Engineer (L8) who combines strong technical expertise with team leadership to drive secure and stable operations of BeyondTrust Endpoint Privilege Management and BeyondTrust Privileged Remote Access.
This role bridges architecture and execution, owning day-to-day operations, handling escalations, and delivering key activities such as PRA upgrades and Jump Point management. You will lead by example contributing technically while guiding engineers, enforcing best practices, and ensuring high service reliability.
Success in this role requires strong problem-solving skills, ownership mindset, and the ability to balance hands-on engineering with effective team coordination and delivery.

Roles Responsibilities:
- Experience in Beyond Trust Password Safe and PRA with strong hands-on.
-Beyond Trust Implementation Certification is mandatory.
-Strong hands-on experience with Beyond Trust Password Safe, Privileged Access Management (PAM), Privileged Session Management, Beyond Trust EPM, PRA, and Beyond Insight.
-Strong understanding of Windows/Linux systems, Active Directory, LDAP, GPO, networking fundamentals, and enterprise security.
-Experience working in high-availability, multi-node and enterprise PAM environments.
-Strong troubleshooting, problem-solving, incident, escalation, and service-restoration skills.
-Beyond Trust Password Safe
-Hands-on experience with Password Safe administration, architecture, configuration, and operational support.
-Experience with Password Management, Managed Accounts, Account Groups, Access Policy, Smart Rules, and privileged account lifecycle management.
-Experience with Discovery and Onboarding of privileged, service, local, domain, application, and ---infrastructure accounts.
-Experience with Secrets, Secret Safe, and secure management of application, service, database, and infrastructure secrets.
-Experience with Privileged Session Management, Session recording and management, session policies, monitoring, and audit requirements.
-Experience with BeyondInsight monitoring, reporting, logs, alerts, and operational health checks.
ssss
-Integration, Automation Customization
-Experience with LDAP Integration and Active Directory integration, including authentication, authorization, group/role mapping, SSO, and MFA.
-Experience with Resource Broker configuration, connectivity, troubleshooting, and distributed PAM environments.
-Experience developing/supporting custom plugin solutions and API script / REST API integrations for BeyondTrust.
-Strong PowerShell scripting and automation experience for onboarding, validation, health checks, reporting, and PAM operational activities.
-Experience integrating BeyondTrust with IAM/IGA platforms such as SailPoint IdentityIQ and SIEM platforms such as Splunk.
-EPM / PRA Requirements
-Strong hands-on experience with BeyondTrust Endpoint Privilege Management (EPM), including EPM agent deployments, endpoint upgrades, application control policies, and least-privilege enforcement.
-Strong hands-on experience with BeyondTrust Privileged Remote Access (PRA), including PRA upgrades, Jump Point creation/management, privileged remote access, and troubleshooting.
-Experience supporting endpoint, application, and privileged account onboarding.
-Upgrade, Migration Engineering
-Proven experience planning and executing Beyond Trust Upgrade and Migration activities, including pre-checks, backups, compatibility validation, implementation, rollback planning, and post-upgrade validation
-Experience with platform upgrades across Password Safe, BeyondInsight, EPM, and PRA environments.
-Experience with PAM migration activities, including account onboarding/migration, policy migration, integrations, validation, and cutover support.
-Ability to create technical documentation, implementation standards, operational procedures, upgrade plans, and troubleshooting guides.
-Team Leadership Technical Governance
-Ability to lead engineers, allocate technical tasks, provide guidance, perform quality checks, and act as the first-level technical escalation point.
-Ability to mentor engineers on Beyond Trust tools, PAM best practices, troubleshooting, automation, and security standards.
-Experience coordinating with IAM, Infrastructure, Network, Security, Application, and Compliance teams.
-Ensure adherence to operational processes, security standards, SLA requirements, change management, audit, and compliance requirements.
-Microsoft LAPS, AutoIT scripting, IAM fundamentals, SSO, MFA, SailPoint IdentityIQ, Splunk, and enterprise PAM integration experience.
-Experience with CyberArk or other enterprise PAM platforms is an advantage.
-Strong communication, documentation, stakeholder management, and team coordination skills.
-Power shell


Professional Technical Skills:
-Hands-on experience with Beyond Trust Password Safe and Privileged Access Management.
-Strong experience with Secrets and Secret Safe for secure privileged and application secret management.
-Experience configuring Smart Rules and executing Discovery and Onboarding of privileged accounts and managed systems.
-Experience with Session recording and management and Privileged Session Management, including monitoring and audit requirements.
-Experience with Beyond Insight for monitoring, reporting, logs, alerts, and operational health checks.
-Hands-on experience with Password Management and Access Policy and custom plugin configuration and support.
-Experience developing and supporting API script integrations and automation using Powershell.
-Strong experience with LDAP Integration and Active Directory integration.
-Experience with Resource Broker configuration, connectivity, and troubleshooting.
-Proven experience with BeyondTrust Upgrade and Migration activities, including planning, validation, implementation, and post-upgrade checks.


- The candidate should have minimum 7.5 years of experience in BeyondTrust Privileged Access Management.
- This position is based at our Bengaluru office.
- A 15 years full time education is required.
Qualification15 years full time education