BeyondTrust Engineer(Contract)

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America.

With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence.

We deliver comprehensive solutions across IAM domains, including:

• Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management)
• Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries.

If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success

As a BeyondTrust Engineer, you will be part of our Delivery Services Team. This position will be responsible for implementing, configuring, and supporting our clients' Privileged Access Management (PAM) environments. You will play a critical role in securing privileged access, onboarding critical assets, integrating enterprise systems, and ensuring the ongoing stability, security, and effectiveness of BeyondTrust solutions.

Location: United States

Employment Type: 3 months contract, Remote

What You'll Do:

• Install, configure, and deploy BeyondTrust solutions based on business and security requirements.
• Translate privileged access requirements into platform configurations, access policies, credential management workflows, and operational procedures.
• Configure privileged credential management, password rotation, access approvals, session monitoring, and session recording capabilities.
• Implement role-based access controls and least-privilege policies for administrators, internal users, and third-party vendors.
• Configure and validate high-availability, disaster recovery, backup, and recovery procedures where applicable.
• Support testing activities, production deployments, and operational handovers.
• Discover and onboard privileged accounts, service accounts, servers, databases, network devices, and other enterprise assets into BeyondTrust.
• Configure managed systems, credential verification policies, password rotation schedules, and account governance controls.
• Identify service account dependencies and coordinate credential updates to prevent application or service disruptions.
• Collaborate with infrastructure teams, application owners, and security stakeholders to validate connectivity, permissions, and access requirements.
• Troubleshoot onboarding issues, password rotation failures, privileged session connectivity issues, and other platform-related incidents.
• Integrate BeyondTrust with Active Directory, enterprise identity providers, MFA platforms, SIEM solutions, and IT Service Management tools.
• Develop scripts and API-based integrations to automate onboarding, reporting, account maintenance, and routine administrative tasks.
• Administer and monitor the BeyondTrust environment to maintain platform availability, performance, and security.
• Perform platform upgrades, patching, certificate renewals, configuration changes, and ongoing maintenance activities.
• Monitor system alerts, failed jobs, password rotation exceptions, and integration health to proactively address issues.
• Manage support cases with BeyondTrust and coordinate issue resolution with internal and external stakeholders.
• Participate in incident response, change management processes, and scheduled maintenance activities.
• Create and maintain architecture diagrams, operational runbooks, configuration documentation, and disaster recovery procedures.
• Support audit activities, access reviews, privileged activity reporting, and evidence collection efforts.
• Provide knowledge transfer sessions and guidance to operations teams, infrastructure teams, and application owners.

Who We're Looking For:

• 3–5 years of hands-on experience implementing, configuring, and supporting BeyondTrust Password Safe within enterprise environments.
• Bachelor's or Master's degree in Computer Science, Computer Engineering, Management Information Systems, Cybersecurity, or equivalent experience.
• Strong understanding of Privileged Access Management (PAM) concepts, including credential vaulting, least privilege, service account management, privileged session monitoring, and access governance.
• Hands-on experience onboarding privileged accounts and managing credential rotation, access workflows, approval processes, and session controls.
• Experience integrating BeyondTrust with Active Directory, identity providers, MFA solutions, SIEM platforms, and enterprise applications.
• Strong knowledge of Windows Server, Linux, Active Directory, and enterprise authentication technologies.
• Understanding of networking fundamentals, including DNS, firewalls, TLS certificates, SSH, and RDP.
• Experience troubleshooting production issues across PAM platforms, target systems, integrations, and enterprise infrastructure.
• Proficiency in PowerShell, Python, or another scripting language, including experience leveraging REST APIs for automation.
• Experience executing production changes, platform upgrades, operational handovers, and ongoing support activities.
• Strong verbal and written communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Ability to work independently as well as collaboratively within cross-functional teams.
• Previous consulting experience would be considered an asset.

Nice-to-Have Skills

• Experience implementing or supporting BeyondTrust Privileged Remote Access (PRA).
• Experience implementing or supporting BeyondTrust Endpoint Privilege Management (EPM).
• Familiarity with BeyondTrust deployments across cloud, hybrid, and on-premises environments.
• Experience integrating BeyondTrust with ServiceNow, SIEM platforms, and enterprise identity providers.
• Experience managing privileged access for cloud infrastructure and automated workloads.
• Experience migrating accounts and systems from another PAM platform.
• Relevant BeyondTrust certifications or formal training.
• Professional experience with additional PAM platforms such as CyberArk, Delinea, or CyberArk Privileged Access Management solutions.#LI-AS1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request. 

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process.

Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.