Lead PAM Engineer | BeyondTrust & IAM Automation

Randstad Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Randstad Malaysia is seeking an experienced Senior Security Engineer specializing in Privileged Access Management (PAM) to own deployment, optimization and operational support of the PAM ecosystem. The role focuses on BeyondTrust Password Safe, with migration and integration work across Microsoft Entra ID and Active Directory, leveraging scripting for automation and continuous security operations.

You will collaborate with global IT and cybersecurity teams, provide guidance to junior analysts,

Qualifications

• 8+ years in Cybersecurity with at least 3 years in PAM
• Strong hands-on PAM experience with BeyondTrust Password Safe or CyberArk
• Proficient in Microsoft Entra ID (Azure AD) and on-prem Active Directory architecture

Responsibilities

• Deploy, configure and maintain PAM solutions, especially BeyondTrust Password Safe
• Assist migration of legacy privileged accounts into BeyondTrust vault and optimize PAM workflows
• Manage integrations between BeyondTrust, AD and Entra ID, including OU structures, GPOs and Kerberos
• Develop PowerShell or Python scripts using BeyondTrust REST APIs for automation
• Investigate and resolve complex security incidents involving endpoint compromise and privilege escalation
• Perform platform upgrades, patching and health checks for reliability
• Provide Level 3 escalation support and mentor junior analysts

Skills

PAM

BeyondTrust Password Safe

Microsoft Entra ID

Active Directory

Kerberos

PowerShell

Python

IAM migrations

Education

Bachelor's Degree in Computer Science/IT

Tools

BeyondTrust Password Safe

CyberArk

Job description

Randstad Malaysia is seeking an experienced Senior Security Engineer specializing in Privileged Access Management (PAM) to own deployment, optimization and operational support of the PAM ecosystem. The role focuses on BeyondTrust Password Safe, with migration and integration work across Microsoft Entra ID and Active Directory, leveraging scripting for automation and continuous security operations.

You will collaborate with global IT and cybersecurity teams, provide guidance to junior analysts,