PAM BeyondTrust Architect

Ampcus, Inc; Chicago (IL); Remote; USD 140,000 - 190,000; Full time

Job summary

Ampcus Inc. is seeking a highly skilled BeyondTrust Architect to lead the end-to-end PAM architecture within an enterprise IDAM program. You will own design, integration, and migration strategies for BeyondTrust across IAM/IGA, cloud, and on‑prem environments.

Collaborating with security, IAM, and infrastructure teams, you will define standards, drive implementation roadmaps, and ensure operations readiness while aligning with business needs and security controls.

Qualifications

• 8+ years IT experience with BeyondTrust implementations.
• Deep understanding of PAM, credential and session management.
• Experience integrating PAM with IAM/IGA, cloud, and on‑prem systems.
• Ability to design architectures, roadmaps, and deployment models.

Responsibilities

• Lead architecture, design, and hands-on implementation of BeyondTrust PAM solutions.
• Serve as design authority, translating requirements into secure architectures.
• Define PAM integration patterns with IAM/IGA, directories, cloud, and security platforms.
• Develop target-state designs and implementation roadmaps for PAM.
• Provide architectural leadership across BeyondTrust technologies and teams.

Skills

BeyondTrust expertise

IAM/IGA integration

Solution architecture

Leadership

Education

BCIE Advanced

Password Safe Admin Advanced

Privileged Access Admin Certification

Endpoint Privilege Management Certification

Tools

BeyondTrust PAM suite

Microsoft Entra ID

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: PAM BeyondTrust Architect

Location(s): Chicago, IL (Remote)

Job Summary

The BeyondTrust Architect will be responsible for the architecture, design, and implementation strategy of the Privileged Access Management (PAM) platform within an enterprise Identity and Access Management (IDAM) program.

The role will own the end-to-end BeyondTrust solution architecture, including integration design, migration strategy, security controls, and operational readiness across enterprise identity services. The architect will provide technical leadership and ensure that PAM solutions align with business requirements, security standards, and enterprise architecture principles.

Key Responsibilities

• Lead the architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions aligned with business and security requirements.
• Serve as the technical design authority, translating business and technical requirements into scalable and secure solution architectures.
• Lead discovery, requirements analysis, solution design, technical planning, and architecture documentation.
• Design integrations between BeyondTrust platforms and IAM/IGA, authentication, directory, cloud, infrastructure, application, and security platforms.
• Define PAM architecture for privileged accounts, service/application accounts, credential management, session management, access controls, and privileged-user lifecycle management.
• Assess existing environments, identify security and architecture gaps, and develop target-state designs and implementation roadmaps.
• Establish PAM architecture standards, security controls, integration patterns, and technical policies.
• Provide architectural leadership across BeyondTrust PAM technologies.
• Collaborate with security, IAM, cloud, infrastructure, and application teams to ensure effective enterprise integration.
• Provide technical leadership and design oversight to engineering and implementation teams.
• Advise clients and senior stakeholders on architecture decisions, risks, dependencies, and recommended approaches.
• Contribute reusable architecture patterns, standards, and best practices to the PAM/IAM Center of Excellence.

Required Qualification

• 8+ years of IT experience, with significant expertise in architecting and implementing BeyondTrust solutions across the entire product suite, including:
  • Password Safe (PWS)
  • Privileged Remote Access (PRA)
  • Endpoint Privilege Management (EPM)
  • PMUL
  • Entitle
  • Insights
• Deep understanding of privileged access management, credential management, session management, least privilege, access controls, and privileged identity governance.
• Experience integrating PAM solutions with IAM/IGA, directories, authentication platforms, cloud services, SIEM, and enterprise infrastructure.
• Experience developing solution architectures, integration designs, deployment models, and technical roadmaps.
• Strong analytical, troubleshooting, stakeholder communication, and technical leadership skills.

Preferred Qualifications and Certifications

• BeyondTrust Certified Implementation Engineer (BCIE) Advanced.
• BeyondTrust Certified Password Safe Administration - Advanced.
• BeyondTrust Certified Privileged Remote Access Administration.
• BeyondTrust Certified Endpoint Privilege Management Windows/Mac Administration.

Interview Focus Areas

• Candidates should be prepared to discuss their experience in the following areas:
• BeyondTrust Architecture Design.
• PAM Migration Strategy.
• Active Directory and Microsoft Entra ID Integration.
• Just-in-Time (JIT) Access and Privileged Governance Design.
• Security Controls and Compliance.
• End-to-End Identity and Access Management (IDAM) Architecture.
• Large Enterprise Delivery and Stakeholder Management.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.