PAM BeyondTrust Architect

Role: PAM BeyondTrust Architect
Location: US, Remote

JD"

"Description and Location
Role Summary
The BeyondTrust Architect will be responsible for the architecture, design, and implementation strategy of the Privileged Access Management (PAM) platform within the Day2 Lot3 IDAM programme. The role will own the end-to-end BeyondTrust solution design, integration architecture, migration strategy, security controls, and operational readiness across enterprise identity services.
Responsibilities
Lead the architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions aligned with business and security requirements.
Serve as the technical design authority, translating requirements into scalable and secure solution architectures.
Lead discovery, requirements analysis, solution design, technical planning, and architecture documentation.
Design integrations between BeyondTrust platforms and IAM/IGA, authentication, directory, cloud, infrastructure, application, and security platforms.
Define BeyondTrust PAM architecture for privileged accounts, service/application accounts, credential management, session management, access controls, and privileged-user lifecycle.
Assess existing environments, identify security and architecture gaps, and define target-state designs and implementation roadmaps.
Establish PAM architecture standards, security controls, integration patterns, and technical policies.
Provide architectural leadership for BeyondTrust PAM technologies.
Partner with security, IAM, cloud, infrastructure, and application teams to ensure effective enterprise integration.
Provide technical leadership and design oversight to engineers and implementation teams.
Advise client and senior stakeholders on architecture decisions, risks, dependencies, and recommended approaches.
Contribute reusable patterns, standards, and best practices to the PAM/IAM Center of Excellence.
Required Skills
8+ years of IT experience, with significant experience in architecting and implementing BeyondTrust solutions across the entire suite including PWS, PRA, EPM, PMUL, Entitle, and Insights.
Deep understanding of privileged access, credential management, session management, least privilege, access controls, and privileged identity governance.
Experience integrating PAM with IAM/IGA, directories, authentication platforms, cloud services, SIEM, and enterprise infrastructure.
Experience developing solution architectures, integration designs, deployment models, and technical roadmaps.
Strong analytical, troubleshooting, stakeholder communication, and technical leadership skills.
Preferred
BeyondTrust Certified Implementation Engineer (BCIE) Advanced
BeyondTrust Certified Password Safe Administration, Advanced
BeyondTrust Certified Privileged Remote Access Administration
BeyondTrust Certified Endpoint Privilege Management Win/ Mac Administration
Interview Focus Areas
BeyondTrust Architecture Design
PAM Migration Strategy
Active Directory & Entra Integration
JIT and Privileged Governance Design
Security Controls & Compliance
End-to-End IDAM Architecture
Large Enterprise Delivery & Stakeholder Management