Job Title : BeyondTrust SME PAM Platform Engineer
Job Type : Contract (612 Months, Extendable)
Location : Seattle, Washington, United States
Experience : 712+ Years
Summary
We are hiring a Contract BeyondTrust SME / PAM Platform Engineer to support an enterprise Privileged Access Management program. The consultant will lead implementation, configuration, automation, and operational support for BeyondTrust PAM solutions across hybrid environments.
Responsibilities
BeyondTrust Engineering (Primary)
- Install, configure, upgrade, and maintain BeyondTrust Password Safe , BeyondInsight , and Endpoint Privilege Management (EPM) .
- Configure credential vaulting, password rotation, SSH key management, and privileged session monitoring.
- Onboard privileged accounts for servers, applications, DBs, and network devices.
- Create and enforce Windows / Linux privilege elevation policies.
PAM Operations & Automation
Build automated onboarding workflows using PowerShell / Python / REST APIs .Manage policy updates, access approvals, JIT access workflows, and audit reporting.Troubleshoot PAM failures, authentication issues, session proxy errors, and integration problems.Integration & Governance
Integrate BeyondTrust with Active Directory, Azure AD, LDAP, SIEM, and ServiceNow .Ensure compliance with SOX, PCI, NIST, ISO requirements.Provide documentation, architecture diagrams, SOPs, and operational runbooks.Required Skills
35+ years hands-on with BeyondTrust (Password Safe, BeyondInsight, EPM).Strong understanding of PAM concepts : vaulting, rotation, session recording, privileged access workflows.Scripting for automation : PowerShell / Python .Strong Linux & Windows administration background.Experience with IAM, RBAC, MFA, Kerberos, SAML, OAuth.Integration experience with AD / Azure AD / LDAP.Nice to Have
Experience with CyberArk, HashiCorp Vault, Thycotic, or Delinea.Cloud platform knowledge (AWS, Azure, GCP).Security certifications (Security+, CISSP, etc.).