Identity and Access Management Engineer (Hybrid)

BeyondTrust Privileged Access Management (PAM) Engineer — design, implement, and maintain privileged access security infrastructure; manage BeyondTrust solutions to protect critical systems and sensitive data by controlling and monitoring privileged user access across the enterprise.

Key Responsibilities
- Deploy, configure, and maintain BeyondTrust Password Safe, Privileged Remote Access, and Endpoint Management
- Design and implement privileged access policies and workflows
- Configure password vaulting, session recording, and automated password rotation
- Integrate BeyondTrust solutions with identity management systems, directories, and security tools
- Monitor performance, availability, and security of BeyondTrust infrastructure
- Perform updates, patches, and maintenance
- Manage user accounts, groups, and access permissions within the PAM platform
- Troubleshoot issues and provide Level 2/3 support for PAM-related incidents
- Develop and enforce privileged access governance policies and procedures
- Conduct access reviews and audit privileged account usage
- Generate compliance reports for internal/external audits
- Implement security controls to prevent unauthorized privileged access
- Respond to security incidents involving privileged accounts
- Create/run maintain technical documentation, runbooks, and SOPs; provide training to end users and IT staff; document configurations/integrations/customizations
- Develop disaster recovery and business continuity procedures for PAM systems

Qualifications
- Bachelor’s + 6+ years OR Master’s + 5+ years OR PhD + no experience
- Experience with BeyondTrust PAM (Password Safe, Privileged Remote Access, etc.)
- Privileged access management concepts and security frameworks
- Windows and Linux administration; Active Directory/LDAP and identity management
- Database administration familiarity (SQL Server, Oracle, MySQL)
- Network protocols, firewalls, and security architecture
- Bachelor’s degree in CS/Information Security or related field
- Analytical/problem-solving, communication/documentation, independent/multi-priority

Preferred
- BeyondTrust certifications; CISSP/CISM/GSEC
- DevOps tools/practices (Ansible, PowerShell, Python)
- Cloud/hybrid (AWS, Azure, GCP)
- SIEM integration/log analysis
- Regulated industry experience (finance/healthcare/government)

Benefits (if eligible/explicitly stated)
- Paid time off (vacation, holidays, sick), medical/dental/vision insurance, 401(k)
- Short-term incentive program eligibility