Consultant - Platform Engineer (BeyondTrust) - PAM

Kalles Group • Seattle, WA

121d • $125,000 - $150,000 • Hybrid

About The Position

As a Privileged Access Management (PAM) Platform Engineer with expertise in BeyondTrust, you will serve as the subject matter expert for the design, implementation, and ongoing management of enterprise PAM solutions. Your work will directly enhance the organization’s security posture by managing privileged account security, integrating PAM systems into existing infrastructure, and driving operational efficiency through automation.

Requirements

• Deep experience and expertise in BeyondTrust.
• 4–6+ years of hands-on experience implementing and managing enterprise PAM platforms (pref experience in BeyondTrust).
• Deep knowledge of privileged account discovery, credential management, password rotation, and session management.
• Strong skills in Windows Server administration, Active Directory, Group Policy, and PowerShell scripting.
• Experience with Linux/Unix administration and shell scripting for multi-platform PAM deployment.
• Understanding of network fundamentals, including protocols, ports, certificates, load balancing, and system hardening.
• Experience with cloud environments (AWS, Azure) and containerization (Docker, Kubernetes).
• Familiarity with identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP).
• PAM Platforms: CyberArk Privileged Access Security, BeyondTrust Password Safe/EPM, Delinea Secret Server/Privilege Manager, PingOne Protect.
• Operating Systems: Windows Server, Windows 10/11, macOS, RHEL, Ubuntu, SUSE.
• Databases: SQL Server, MySQL, PostgreSQL, Oracle.
• Virtualization: VMware vSphere, Hyper-V, and cloud-based virtual machines.
• Scripting: PowerShell, Bash, Python for automation and integration.
• Security Tools: Experience integrating PAM with vulnerability scanners, EDR tools, and identity governance platforms.

Nice To Haves

• Vendor certifications for PAM platforms are a plus (e.g., CyberArk Certified Delivery Engineer, BeyondTrust Certified Implementation Engineer, Delinea Certified Professional).
• Experience working with multiple PAM solutions and managing migration/integration projects.
• Knowledge of DevOps, CI/CD pipelines, and Infrastructure as Code tools (Terraform, Ansible).
• Integration experience with ITSM platforms (ServiceNow, Jira) and SIEM systems (Splunk, QRadar).
• Understanding of zero trust security principles and least privilege access.
• Familiarity with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Industry certifications such as CISSP, CISM, or cloud security credentials.

Responsibilities

• Oversee implementation of BeyondTrust.
• Lead the architecture, deployment, and optimization of PAM solutions, including password vaulting, endpoint privilege management, and session management.
• Plan and execute enterprise-scale PAM implementations across Windows, macOS, and Linux platforms.
• Define and maintain privilege elevation policies, credential rotation processes, and governance workflows in alignment with compliance standards.
• Integrate PAM platforms with ITSM, SIEM, vulnerability management, directory services, and other enterprise security systems.
• Provide advanced troubleshooting, performance optimization, and support for PAM-related incidents and access requests.
• Ensure compliance with industry standards by implementing audit trails, session recording, and privileged account governance.
• Create and maintain technical documentation, standard operating procedures, and training materials
• Continuously evaluate new PAM features and best practices to improve security and efficiency.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 11-50 employees