BeyondTrust PAM Consultant

Responsibilities:

• Configure and manage BeyondTrust Password Safe.
• Onboard privileged human and non-human identities, including service accounts, application accounts, database accounts, and other machine identities.
• Gather onboarding requirements and validate account ownership, purpose, dependencies, platforms, and credential rotation requirements.
• Configure password rotation, access policies, approvals, account reconciliation, and session controls.
• Coordinate with application, infrastructure, database, and identity teams to onboard accounts without disrupting dependent services.
• Troubleshoot platform, connector, account onboarding, credential rotation, and integration issues.
• Support privileged account discovery, remediation, upgrades, maintenance, health checks, and operational improvements.
• Prepare technical documentation, onboarding procedures, and knowledge-transfer materials.

Required Skills:

• Strong hands-on experience with BeyondTrust Password Safe.
• Good understanding of PAM, privileged account lifecycle management, and non-human identity risks.
• Practical experience onboarding service accounts, application accounts, database accounts, and other machine identities into a PAM platform.
• Experience with Windows, Linux, Active Directory, databases, applications, and account dependencies.
• Knowledge of credential rotation, reconciliation, access policies, APIs, scripting, authentication, and enterprise integrations.
• Ability to coordinate onboarding activities with account owners and technical teams while minimizing service disruption.
• Strong troubleshooting, documentation, and communication skills.