Beyond Trust Engineer
5 days ago
Seattle
Job Title: Privileged Access Management - Beyond Trust Engineer Duration: 6 months Location: Seattle, WA (Hybrid) Description: • PAM Platform Leadership: Serve as the primary technical expert for privileged access management solutions, including architecture, deployment, configuration, and optimization of password vaults and endpoint privilege management systems, • Enterprise PAM Implementation: Design and execute large-scale PAM deployments across Windows, macOS, and Linux environments, ensuring seamless integration with existing infrastructure, • Policy Development & Management: Create and maintain privilege elevation policies, credential rotation schedules, access request workflows, and governance rules aligned with security and compliance requirements, • Integration & Automation: Integrate PAM solutions with ITSM platforms, SIEM tools, vulnerability scanners, directory services, and other security infrastructure to create comprehensive privileged access workflows, • Troubleshooting & Support: Provide expert-level technical support for PAM platform issues, performance optimization, privileged account onboarding, and user access requests, • Security & Compliance: Ensure PAM implementations meet PCI DSS, and other requirements through proper audit trails, session recording and monitoring, and privileged account governance, • Documentation & Training: Develop technical documentation, procedures, and training materials for internal teams and end users, • Continuous Improvement: Monitor platform performance, evaluate new features, and implement best practices to enhance security posture and operational efficiency Required Experience: • 4-6+ years of hands-on experience implementing and managing enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea (Thycotic) in large-scale environments, • Vendor certifications in one or more major PAM platforms (CyberArk Certified Delivery Engineer, BeyondTrust Certified Implementation Engineer, Delinea certified professional, etc.) preferred, • Deep expertise in privileged account discovery, credential management, password rotation, session management, and access request workflows using enterprise PAM solutions, • Strong understanding of Windows Server administration, Active Directory, Group Policy, and PowerShell scripting, • Experience with Linux/Unix system administration and shell scripting for cross-platform PAM deployments, • Knowledge of networking fundamentals including protocols, ports, certificates, load balancing, and security hardening, • Experience with cloud platforms (AWS, Azure) and containerization technologies (Docker, Kubernetes), • Understanding of identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP) and their integration with PAM solutions Technical Skills: • PAM Platforms: Experience with major vendors (CyberArk Privileged Access Security, BeyondTrust Password Safe/EPM, Delinea Secret Server/Privilege Manager, Ping Identity PingOne Protect), • Operating Systems: Windows Server (2016/2019/2022), Windows 10/11, macOS, RHEL, Ubuntu, SUSE, • Databases: SQL Server, MySQL, PostgreSQL, Oracle for PAM backend configuration, • Virtualization: VMware vSphere, Hyper-V, cloud-based virtual machines, • Scripting: PowerShell, Bash, Python for automation and integration tasks, • Security Tools: Integration experience with vulnerability scanners, endpoint detection tools, and identity governance platforms Preferred Qualifications: • Experience with multiple PAM vendors and platform migration/integration projects, • Knowledge of DevOps practices, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible), • Familiarity with ITSM integration (ServiceNow, Jira) for ticket-driven privileged access workflows, • Experience with SIEM integration and security monitoring platforms (Splunk, QRadar, etc.), • Understanding of zero trust architecture and least privilege access principles, • Experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault), • Previous experience in retail technology environments or large-scale enterprise deployments, • Industry certifications such as CISSP, CISM, or relevant cloud security certifications