Senior PAM Engineer for MSPs (BeyondTrust)

Remote; San Francisco (CA); On-site; USD 150,000 - 230,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k)

Paid holidays

Paid time off

Parental leave

Benefits details at aheadbenefits.com

Job summary

AHEAD is hiring a Senior Privileged Access Management (PAM) Engineer for its Managed Services team in San Francisco. You will lead design, implementation, and operations of multi-tenant PAM using BeyondTrust, integrating with identity, ITSM, and security platforms, while driving automation and secure, least-privilege architectures.

The role demands deep PAM expertise, scripting skills, and a consulting mindset to deliver for multiple customers and environments.

Qualifications

• Minimum 7 years in IT operations, infrastructure, or cybersecurity with hands-on privileged access controls.
• 3+ years designing and operating PAM solutions; BeyondTrust preferred.
• Experience delivering services in a managed or multi-tenant environment.
• Strong scripting and automation skills (PowerShell, Python).
• Good knowledge of AD/Entra ID, LDAP and IAM concepts.
• Excellent communication and cross-functional collaboration abilities.

Responsibilities

• Lead architecture and design of multi-tenant BeyondTrust PAM services for MSPs.
• Architect secure privileged access workflows for infra, apps, databases, cloud, and networks.
• Implement and maintain BeyondTrust Password Safe components and workflows.
• Implement and maintain BeyondTrust Privilege Management for Windows and Linux.
• Design highly available PAM infrastructure with DR strategies.
• Integrate PAM with AD, MFA/SAML/OIDC, SIEM, and ITSM tools like ServiceNow.
• Develop automation to onboard privileged accounts and enforce policies at scale.
• Onboard customers, gather requirements, and define onboarding playbooks.
• Maintain standardized PAM policies, credential management, and session monitoring.
• Provide mentoring and act as SME for PAM concepts and BeyondTrust practices.

Skills

PAM concepts

BeyondTrust

PowerShell

Python

Automation

MSP experience

SAML/OIDC

Active Directory

ITSM integration

Education

Bachelor's in CS/IS

Tools

BeyondTrust Password Safe

BeyondTrust Privilege Management

ServiceNow

SIEM tools

Job description

AHEAD is hiring a Senior Privileged Access Management (PAM) Engineer for its Managed Services team in San Francisco. You will lead design, implementation, and operations of multi-tenant PAM using BeyondTrust, integrating with identity, ITSM, and security platforms, while driving automation and secure, least-privilege architectures.

The role demands deep PAM expertise, scripting skills, and a consulting mindset to deliver for multiple customers and environments.