PAM & PRA Implementation and Administration Engineer

Job Description

The BeyondTrust PAM & PRA Implementation and Administration Engineer will be responsible for implementing, configuring, and maintaining the BeyondTrust Privileged Access Management (PAM) and Privileged Remote Access (PRA) solutions. This role will focus on onboarding assets, privileged accounts, migrating legacy PAM systems, and ensuring secure, compliant access to critical systems across the organization. Key Responsibilities: Implementation & Configuration: Lead the deployment, integration, and configuration of BeyondTrust PAM and PRA solutions. Customize policies, vaults, and workflows to align with organizational security requirements and NCA ECC controls. Integrate BeyondTrust with Active Directory, SIEM, ticketing, and MFA solutions. Administration & Operations: Manage day-to-day administration of PAM/PRA systems including user access, policies, and credentials lifecycle management. Monitor system performance, apply patches, and perform health checks to ensure high availability. Maintain comprehensive documentation of configurations, integrations, and operational procedures. Asset Onboarding & Access Control: Onboard servers, network devices, databases, and applications into PAM. Classify and group assets by business unit, criticality, and environment (production, staging, etc.). Enforce least privilege and session monitoring controls for all privileged accounts. Migration & Continuous Improvement: Plan and execute migration from legacy PAM platforms to BeyondTrust. Identify gaps and optimize processes for privilege management, access approval, and password rotation. Work closely with cybersecurity and IT operations teams to ensure smooth transition and minimal downtime. Security & Compliance: Ensure PAM/PRA controls comply with NCA ECC, ISO 27001, and internal cybersecurity standards. Conduct periodic audits and prepare compliance evidence for regulatory reviews. Respond to security incidents involving privileged access or credential misuse. Qualifications & Experience: Bachelor?s degree in computer science, Information Security, or related field. 2- 5 years of experience in cybersecurity or infrastructure security. Hands-on experience with BeyondTrust PAM and PRA platforms (implementation and administration). Knowledge of Windows/Linux system administration, Active Directory, SIEM integration, and network security. Experience in asset onboarding, privileged account lifecycle management, and migration planning. Preferred Skills: Experience integrating PAM with ticketing systems (ServiceNow, Jira). PowerShell or Python scripting for automation. Strong troubleshooting and communication skills.