Security Architect

Overview

Hands-on Senior Engineer (L8) role combining technical expertise with team leadership to drive secure and stable operations of BeyondTrust Endpoint Privilege Management and BeyondTrust Privileged Remote Access, bridging architecture and execution.

What you'll do

• Own day-to-day operations of BeyondTrust EPM and PRA, and handle escalations.
• Deliver key activities such as PRA upgrades and Jump Point management.
• Lead engineers by contributing technically, guiding the team, and enforcing best practices.
• Lead engineers, allocate technical tasks, provide guidance, perform quality checks, and act as the first-level technical escalation point.
• Mentor engineers on BeyondTrust tools, PAM best practices, troubleshooting, automation, and security standards.
• Plan and execute BeyondTrust upgrade and migration activities, including pre-checks, backups, compatibility validation, implementation, rollback planning, and post-upgrade validation.
• Create technical documentation, implementation standards, operational procedures, upgrade plans, and troubleshooting guides.
• Coordinate with IAM, Infrastructure, Network, Security, Application, and Compliance teams.
• Ensure adherence to operational processes, security standards, SLA requirements, change management, audit, and compliance requirements.
• Configure and support Password Safe administration, architecture, and privileged account lifecycle management.
• Perform discovery and onboarding of privileged, service, local, domain, application, and infrastructure accounts.
• Manage secrets and Secret Safe for application, service, database, and infrastructure secrets.
• Manage privileged session recording, session policies, monitoring, and audit requirements.
• Monitor BeyondInsight reporting, logs, alerts, and operational health checks.
• Configure and support LDAP and Active Directory integration, including authentication, authorization, group/role mapping, SSO, and MFA.
• Configure, troubleshoot, and support Resource Broker connectivity in distributed PAM environments.
• Develop and support custom plugin solutions, API script, and REST API integrations for BeyondTrust.
• Write PowerShell scripts for onboarding, validation, health checks, reporting, and PAM operational activities.
• Deploy EPM agents, upgrade endpoints, and enforce application control policies and least-privilege.
• Create Jump Points and manage privileged remote access, including troubleshooting.

What you'll need

• BeyondTrust Privileged Access Management: must-have skill.
• Minimum 7.5 years of experience in BeyondTrust Privileged Access Management.
• Experience in BeyondTrust Password Safe and PRA with strong hands-on experience.
• BeyondTrust Implementation Certification (mandatory).
• Strong hands-on experience with BeyondTrust Password Safe, PAM, Privileged Session Management, BeyondTrust EPM, PRA, and BeyondInsight.
• Strong understanding of Windows/Linux systems, Active Directory, LDAP, GPO, networking fundamentals, and enterprise security.
• Experience working in high-availability, multi-node, and enterprise PAM environments.
• Strong troubleshooting, problem-solving, incident, escalation, and service-restoration skills.
• Experience with Password Management, Managed Accounts, Account Groups, Access Policy, Smart Rules, and privileged account lifecycle management.
• Experience with Discovery and Onboarding of privileged, service, local, domain, application, and infrastructure accounts.
• Experience with Secrets, Secret Safe, and secure management of application, service, database, and infrastructure secrets.
• Experience with Privileged Session Management, session recording, session policies, monitoring, and audit requirements.
• Experience with BeyondInsight monitoring, reporting, logs, alerts, and operational health checks.
• Experience with LDAP and Active Directory integration, including authentication, authorization, group/role mapping, SSO, and MFA.
• Experience with Resource Broker configuration, connectivity, troubleshooting, and distributed PAM environments.
• Experience developing or supporting custom plugin solutions and API script / REST API integrations for BeyondTrust.
• Strong PowerShell scripting and automation experience for onboarding, validation, health checks, reporting, and PAM operational activities.
• Experience integrating BeyondTrust with IAM/IGA platforms such as SailPoint IdentityIQ and SIEM platforms such as Splunk.
• Strong hands-on experience with BeyondTrust EPM, including EPM agent deployments, endpoint upgrades, application control policies, and least-privilege enforcement.
• Strong hands-on experience with BeyondTrust PRA, including PRA upgrades, Jump Point creation/management, privileged remote access, and troubleshooting.
• Experience supporting endpoint, application, and privileged account onboarding.
• Proven experience planning and executing BeyondTrust upgrade and migration activities, including pre-checks, backups, compatibility validation, implementation, rollback planning, and post-upgrade validation.
• Experience with platform upgrades across Password Safe, BeyondInsight, EPM, and PRA environments.
• Experience with PAM migration activities, including account onboarding/migration, policy migration, integrations, validation, and cutover support.
• Ability to create technical documentation, implementation standards, operational procedures, upgrade plans, and troubleshooting guides.
• Strong communication, documentation, stakeholder management, and team coordination skills.
• 15 years full time education.

Nice to have

• Microsoft LAPS, AutoIT scripting, IAM fundamentals, SSO, MFA, SailPoint IdentityIQ, Splunk, and enterprise PAM integration experience.
• Experience with CyberArk or other enterprise PAM platforms.

Details

• Location: Bengaluru office.
• Employment: full-time, 15 years full time education required.