PAM BeyondTrust Architect

Ampcus Inc; Chicago (IL); Remote; USD 140,000 - 210,000; Full time

Job summary

Ampcus Inc. is seeking a highly skilled PAM BeyondTrust Architect to lead architecture, design, and implementation of an enterprise BeyondTrust PAM program in a Chicago-based role with remote options.

You will own end-to-end BeyondTrust solution architecture, drive integration with IAM/IGA, define target-state designs, and ensure security controls and standards are met across enterprise identity services. Strong leadership and stakeholder communication are essential.

Qualifications

• 8+ years IT experience with hands-on BeyondTrust implementations across the product suite.
• Deep knowledge of PAM, credential management, session control, least privilege.
• Experience integrating PAM with IAM/IGA, directories, cloud, and SIEM.
• Ability to design architectures, roadmaps, and deployment models.
• Strong analytical, troubleshooting and leadership skills.

Responsibilities

• Lead architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions.
• Serve as the technical design authority translating requirements into secure architectures.
• Lead discovery, requirements analysis, solution design, and architecture docs.
• Design integrations between BeyondTrust and IAM/IGA, authentication, cloud and security platforms.
• Define PAM architecture for privileged accounts, credential management, and session control.
• Assess environments, identify gaps, and develop target-state designs and roadmaps.
• Establish PAM architecture standards, security controls, and integration patterns.
• Provide architectural leadership across BeyondTrust PAM technologies.
• Collaborate with security, IAM, cloud, infra, and application teams for enterprise integration.
• Advise clients and stakeholders on architecture decisions, risks, and approaches.
• Contribute reusable patterns and best practices to PAM/IAM COE.

Skills

PAM architecture

Technical leadership

Requirements analysis

Architecture documentation

Stakeholder communication

Tools

BeyondTrust Password Safe (PWS)

BeyondTrust Privileged Remote Access (PRA)

BeyondTrust Endpoint Privilege Management (EPM)

BeyondTrust PMUL

BeyondTrust Entitle

BeyondTrust Insights

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title

PAM BeyondTrust Architect

Location

Chicago, IL (Remote)

Job Summary

The BeyondTrust Architect will be responsible for the architecture, design, and implementation strategy of the Privileged Access Management (PAM) platform within an enterprise Identity and Access Management (IDAM) program. The role will own the end-to-end BeyondTrust solution architecture, including integration design, migration strategy, security controls, and operational readiness across enterprise identity services. The architect will provide technical leadership and ensure that PAM solutions align with business requirements, security standards, and enterprise architecture principles.

Key Responsibilities

• Lead the architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions aligned with business and security requirements.
• Serve as the technical design authority, translating business and technical requirements into scalable and secure solution architectures.
• Lead discovery, requirements analysis, solution design, technical planning, and architecture documentation.
• Design integrations between BeyondTrust platforms and IAM/IGA, authentication, directory, cloud, infrastructure, application, and security platforms.
• Define PAM architecture for privileged accounts, service/application accounts, credential management, session management, access controls, and privileged-user lifecycle management.
• Assess existing environments, identify security and architecture gaps, and develop target-state designs and implementation roadmaps.
• Establish PAM architecture standards, security controls, integration patterns, and technical policies.
• Provide architectural leadership across BeyondTrust PAM technologies.
• Collaborate with security, IAM, cloud, infrastructure, and application teams to ensure effective enterprise integration.
• Provide technical leadership and design oversight to engineering and implementation teams.
• Advise clients and senior stakeholders on architecture decisions, risks, dependencies, and recommended approaches.
• Contribute reusable architecture patterns, standards, and best practices to the PAM/IAM Center of Excellence.

Required Qualification

• 8+ years of IT experience, with significant expertise in architecting and implementing BeyondTrust solutions across the entire product suite, including:
  • Password Safe (PWS)
  • Privileged Remote Access (PRA)
  • Endpoint Privilege Management (EPM)
  • PMUL
  • Entitle
  • Insights
• Deep understanding of privileged access management, credential management, session management, least privilege, access controls, and privileged identity governance.
• Experience integrating PAM solutions with IAM/IGA, directories, authentication platforms, cloud services, SIEM, and enterprise infrastructure.
• Experience developing solution architectures, integration designs, deployment models, and technical roadmaps.
• Strong analytical, troubleshooting, stakeholder communication, and technical leadership skills.

Preferred Qualifications And Certifications

• BeyondTrust Certified Implementation Engineer (BCIE) Advanced.
• BeyondTrust Certified Password Safe Administration - Advanced.
• BeyondTrust Certified Privileged Remote Access Administration.
• BeyondTrust Certified Endpoint Privilege Management Windows/Mac Administration.

Interview Focus Areas

• Candidates should be prepared to discuss their experience in the following areas:
• BeyondTrust Architecture Design.
• PAM Migration Strategy.
• Active Directory and Microsoft Entra ID Integration.
• Just-in-Time (JIT) Access and Privileged Governance Design.
• Security Controls and Compliance.
• End-to-End Identity and Access Management (IDAM) Architecture.
• Large Enterprise Delivery and Stakeholder Management.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.