BeyondTrust Architect (Contract)

KeyData Cyber; United States; Remote; USD 124,000 - 207,000; Part time

Job summary

KeyData Cyber is seeking a BeyondTrust Architect for its Delivery Services Team in the USA, remote. The contract role (up to 6 months) focuses on designing and delivering enterprise Endpoint Privilege Management solutions to clients across North America.

You will define EPM strategy, architecture, and implementation roadmaps, working with customers to translate security requirements into scalable, least-privilege designs.

Qualifications

• 8+ years in cybersecurity, IAM, or security architecture with enterprise EPM experience.
• Hands-on BeyondTrust EPM architecture, policy design, and least-privilege implementation.
• Experience designing EPM roadmaps and translating requirements into technical solutions.

Responsibilities

• Define and design enterprise EPM architecture, strategy, and roadmaps.
• Lead client architecture discussions and solution design sessions.
• Design integrations with AD/Entra ID, IAM, MFA, SIEM, ITSM.
• Provide technical leadership during deployments and handover.
• Develop architecture docs and mentor delivery teams.

Skills

BeyondTrust EPM

Endpoint security

IAM

Zero Trust

Policy design

Education

CS/IT/Cybersecurity degree

Tools

Active Directory/Entra ID

SIEM

ITSM

PowerShell

Job description

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset.

Proud to be recognized as a Culture 100 Award winner, KeyData Cyber is committed to building a workplace where people feel valued, supported, and empowered to grow. Our culture is rooted in collaboration, innovation, and continuous learning, creating opportunities for our people to thrive and make a meaningful impact.

Join an award-winning team where your ideas matter, your growth is supported, and your contributions make a difference.

As a BeyondTrust Architect, you will be a key member of our Delivery Services Team, responsible for designing and delivering enterprise Endpoint Privilege Management (EPM) solutions. You will work closely with clients to define EPM strategy, architecture, and implementation roadmaps, while providing technical leadership across least privilege, application control, privilege elevation, and endpoint security.

Location: USA, Remote

Employment Type: Contract Up to 6 Months

What You’ll Do

• Define and design enterprise EPM architecture, strategy, standards, governance, and implementation roadmaps aligned with Zero Trust and least-privilege principles.
• Assess existing endpoint privilege environments and design target-state solutions covering privilege elevation, application control, policy management, exception handling, and removal of local administrator rights.
• Lead client architecture discussions, technical workshops, solution design, and implementation planning, translating business and security requirements into scalable EPM solutions.
• Design integrations between EPM and enterprise technologies including Active Directory/Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms.
• Provide technical leadership throughout EPM deployments, including design, testing, troubleshooting, production rollout, and operational handover.
• Develop architecture and technical design documentation and provide mentoring and technical guidance to delivery teams.

Who We’re Looking For

• 8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles, with significant enterprise EPM experience.
• Strong hands-on experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation.
• 5+ years of experience designing EPM architectures, developing security strategies and roadmaps, and translating business requirements into technical solutions.
• Strong understanding of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls.
• Experience integrating EPM solutions with IAM, MFA, SIEM, ITSM, endpoint management, and other enterprise security technologies.
• Strong consulting, communication, documentation, problem-solving, and stakeholder-management skills, with the ability to lead technical discussions with both technical and business stakeholders.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.

Nice-to-Have Skills

• BeyondTrust certifications
• Experience with BeyonTrust PAM in addition to EPM
• Experience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms
• PowerShell, Python, Bash, APIs, or automation experience
• Experience with Zero Trust architecture and enterprise security frameworks
• CISSP, CISM, or other relevant industry certifications.

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third-party service providers as part of our standard application screening process.