BeyondTrust PAM Engineer

Athena Consultancy Services; Dadri, Chennai District, Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Athena Consultancy Services in India seeks an experienced architect to design and implement enterprise-scale BeyondTrust PRA solutions. You will define PRA architecture, onboarding strategies, vaulting standards, and privileged access controls, and deploy PRA appliances across physical, virtual, or cloud environments.

You will configure Jump points and access pathways for remote endpoints, servers and devices, and lead integration with AD/LDAP/MFA/SIEM/ITSM while driving automation via

Responsibilities

• Design, architect, and implement enterprise-scale BeyondTrust PRA solution.
• Define architecture, onboarding strategies, vaulting standards, and privileged access controls.
• Deploy, configure, and maintain BeyondTrust PRA appliances (physical, virtual, or cloud) including sizing, failover and high-availability.
• Configure and manage Jump points, Jump Clients, and Jump Item Roles to broker secure access to remote endpoints, servers, and network devices.
• Set up access pathways for RDP, SSH, VNC, Telnet, HTTP/HTTPS, and web-based access through PRA console and web console.
• Create technical solution designs, integration architectures, and deployment blueprints.
• Lead PAM transformation and modernization across on-premises and cloud environments.
• Integrate BeyondTrust PAM with Active Directory/Azure AD/Entra ID, LDAP, RADIUS, MFA, SIEM, ITSM tools, and cloud platforms.
• Develop automation using PowerShell, REST APIs, Python, and Infrastructure-as-Code, and implement automated onboarding and privileged account lifecycle processes.

Job description

Solution Design & Architecture

• Design, architect, and implement enterprise-scale BeyondTrust PRA solution.
• Define BeyondTrust PRA architecture, onboarding strategies, vaulting standards, and privileged access controls.
• Deploy, configure, and maintain the BeyondTrust Privileged Remote Access (PRA) appliance (physical, virtual, or cloud/SaaS) including sizing, failover, and high-availability setup.
• Configure and manage Jum points, Jump Clients, and Jump Item Roles to broker secure access to remote endpoints, servers, and network devices.
• Set up access pathways for RDP, SSH, VNC, Telnet, HTTP/HTTPS, and web-based application access through the PRA access console and web console.
• Create technical solution designs, integration architectures, and deployment blueprints.
• Lead PAM transformation and modernization initiatives across on-premises and cloud environments.

BeyondTrust PRA Implementation & Administration

• Deploy, configure, and manage:
• BeyondTrust Password Safe Integration with PRA (Privileged Remote Access)
• Privileged Remote Access (PRA)
• Endpoint Privilege Management (EPM)
• Session Monitoring and Recording
• BeyondInsight
• Discovery and Account Management components
• Configure password rotation policies, credential injection, and session controls.
• Implement least privilege and Zero Trust security principles.
• Implement time-based and approval-based access (access request/approval workflows) for just-in-time (JIT) privileged sessions.
• Onboard and manage internal users, vendor/third-party users, and service teams with appropriate access scoping.
• Perform platform upgrades, migrations, patch management, and health assessments.

Integration & Automation

• Integrate BeyondTrust PAM with:
• Active Directory / Azure AD / Entra ID
• LDAP
• RADIUS
• MFA solutions (Microsoft Authenticator, Duo, RSA, Okta, etc.)
• SIEM platforms (Microsoft Sentinel, Splunk, QRadar)
• ITSM tools (ServiceNow, Remedy)
• Cloud platforms (Azure, AWS, GCP)
• Develop automation using:
• PowerShell
• REST APIs
• Python
• Infrastructure-as-Code methodologies
• Implement automated onboarding and privileged account lifecycle processes.