BeyondTrust PAM Implementation Consultant (35719)

Myticas Consulting Inc.; Ottawa; On-site; CAD 110,000 - 150,000; Full time

Job summary

Myticas Consulting Inc. is recruiting an experienced BeyondTrust PAM Implementation Consultant for our Ottawa client. The consultant will lead hands-on implementation, configuration and operational support across the BeyondTrust PAM platform.

You'll configure Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle and Insights, and manage enterprise integrations, onboarding and knowledge transfer.

Qualifications

• Hands-on BeyondTrust PAM implementation experience.
• Experience configuring Password Safe and PRA.
• Experience with enterprise integrations (AD, SAML, LDAP).
• Strong documentation and knowledge-transfer skills.

Responsibilities

• Lead hands-on BeyondTrust PAM implementation and configuration.
• Configure Password Safe, PRA, EPM, Entitle and Insights.
• Integrate with Active Directory, Entra ID/Azure AD, LDAP, SAML, MFA and SIEM.
• Onboard privileged accounts, service accounts, servers and devices.
• Develop runbooks and operational procedures.
• Facilitate technical workshops and knowledge transfer.

Skills

BeyondTrust PAM

Password Safe

Privileged Remote Access

Endpoint Privilege Management

Entitle & Insights

RBAC

SAML / MFA integration

Workshop facilitation

Tools

Active Directory

Azure AD

LDAP

SAML

MFA

SIEM

ITSM

Job description

Myticas Consulting is recruiting an experienced BeyondTrust Privileged Access Management Implementation Consultant for our Ottawa client.

The consultant will provide hands-on implementation, configuration and operational support across the BeyondTrust PAM platform. The work will include Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle and Insights, enterprise integrations, privileged-account onboarding and knowledge transfer.

Core Responsibilities

• Support the development of the long-term PAM operating model and associated technical-support processes.
• Identify operational dependencies and requirements for ongoing platform administration.
• Perform hands-on configuration of BeyondTrust Password Safe, Privileged Remote Access, Endpoint Privilege Management and Entitle.
• Configure policies, workflows, credential and password rotation, discovery, Smart Rules, RBAC, session settings and reporting.
• Configure and troubleshoot integrations with Active Directory, Entra ID/Azure AD, LDAP, SAML, MFA, SIEM, ITSM and other enterprise services.
• Support the onboarding of users, privileged accounts, service accounts, servers, endpoints, network devices, databases, applications and third-party vendors.
• Support the phased rollout of BeyondTrust capabilities.
• Develop technical documentation, runbooks, configuration standards and operational procedures.
• Provide hands-on knowledge transfer to Canadian Blood Services technical and operational resources throughout the implementation.
• Participate in technical workshops with multiple teams.
• Work directly with BeyondTrust to resolve issues and obtain product-specific guidance when required.

Preferred Skills And Experience

• Direct experience with BeyondTrust Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle and Insights.
• Experience deploying Resource Brokers, gateways, Jump Clients and agents.
• Experience designing and running discovery scans.
• Experience configuring Smart Rules, custom platforms, RBAC, session management and reporting within Password Safe.
• Experience designing and deploying EPM agents, group policies, content groups and custom tokens across Windows, macOS and Linux.
• Experience deploying Active Directory Bridge.
• Experience configuring and onboarding Windows and Linux systems, network devices, service accounts, privileged accounts, databases and applications.
• Experience integrating PAM solutions with Active Directory, Entra ID, LDAP, SAML, MFA and enterprise authentication services.
• Experience integrating PAM platforms with SIEM, Syslog and ITSM solutions.
• Experience establishing privileged access management for enterprise infrastructure and network devices using BeyondTrust, Cisco ISE and TACACS+.
• Experience supporting break-glass access, least-privilege controls, vendor access and privileged-account management processes.
• Strong troubleshooting, documentation, workshop facilitation and knowledge-transfer capabilities.