IAM/PAM Engineer with strong in BeyondTrust exp

IAM/PAM Engineer with strong in BeyondTrust exp

San Francisco, CA

Long Term Contract

We are seeking a highly skilled  IAM/PAM Engineer with deep expertise in BeyondTrust Privileged Access Management solutions. The ideal candidate will lead the design, deployment, and management of PAM capabilities to secure privileged accounts, credentials, and access across hybrid IT environments (on-premises and cloud). This role requires a strong mix of technical proficiency, architecture design skills, and the ability to partner with security, compliance, and infrastructure teams to ensure privileged access is tightly controlled and monitored.

Key Responsibilities:

BeyondTrust PAM Engineering

• Design, implement, and maintain BeyondTrust Password Safe, Privilege Management, and Endpoint Privilege Management (EPM).
• Configure and manage credential vaulting, session management, and privileged access workflows.
• Integrate BeyondTrust with Active Directory/Entra ID, SIEM, ticketing systems, and cloud services (AWS, Azure, Google Cloud Platform).
• Customize BeyondTrust policies and connectors for privileged accounts, databases, servers, applications, and cloud workloads.
• Troubleshoot and resolve complex PAM-related issues, providing L3 SME-level support.

IAM & PAM Governance

• Define and enforce policies for privileged account lifecycle management, least privilege, and just-in-time (JIT) access.
• Support audit, compliance, and regulatory requirements (e.g., SOX, PCI DSS, HIPAA, ISO 27001, NIST).
• Perform access reviews, SoD (Segregation of Duties) analysis, and remediation for privileged accounts.
• Develop and maintain standards, runbooks, and best practices for PAM and IAM operations.

Security Engineering & Operations

• Partner with SOC and Cybersecurity teams to monitor PAM events and alerts, escalating and remediating threats.
• Automate workflows and reporting for privileged access operations (e.g., PowerShell, Python, REST APIs).
• Provide technical leadership in IAM/PAM projects, upgrades, migrations, and integrations.
• Mentor junior engineers and guide teams on PAM best practices.

Qualifications & Skills:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 7–10+ years of experience in IAM/PAM engineering.
• 3–5 years of hands-on experience with BeyondTrust PAM solutions (Password Safe, Privilege Management, EPM).
• Technical Skills
• Expertise in BeyondTrust PAM architecture, deployment, and integrations.
• Strong knowledge of Windows, Linux, AD/Entra ID, databases, and cloud platforms (AWS, Azure, Google Cloud Platform).
• Familiarity with privileged access governance, JIT, zero trust models, and credential vaulting.
• Experience integrating PAM with ITSM tools (ServiceNow, ManageEngine, etc.) and SIEM/SOAR platforms.

Proficiency in scripting/automation (PowerShell, Python, REST APIs).