PAM BeyondTrust Architect

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: PAM BeyondTrust Architect

Location(s): Chicago, IL
(Remote)

Job Summary
The BeyondTrust Architect will be responsible for the architecture, design, and implementation strategy of the Privileged Access Management (PAM) platform within an enterprise Identity and Access Management (IDAM) program.

The role will own the end-to-end BeyondTrust solution architecture, including integration design, migration strategy, security controls, and operational readiness across enterprise identity services. The architect will provide technical leadership and ensure that PAM solutions align with business requirements, security standards, and enterprise architecture principles.

Key Responsibilities

• Lead the architecture, design, and hands-on implementation of enterprise BeyondTrust PAM solutions aligned with business and security requirements.
• Serve as the technical design authority, translating business and technical requirements into scalable and secure solution architectures.
• Lead discovery, requirements analysis, solution design, technical planning, and architecture documentation.
• Design integrations between BeyondTrust platforms and IAM/IGA, authentication, directory, cloud, infrastructure, application, and security platforms.
• Define PAM architecture for privileged accounts, service/application accounts, credential management, session management, access controls, and privileged-user lifecycle management.
• Assess existing environments, identify security and architecture gaps, and develop target-state designs and implementation roadmaps.
• Establish PAM architecture standards, security controls, integration patterns, and technical policies.
• Provide architectural leadership across BeyondTrust PAM technologies.
• Collaborate with security, IAM, cloud, infrastructure, and application teams to ensure effective enterprise integration.
• Provide technical leadership and design oversight to engineering and implementation teams.
• Advise clients and senior stakeholders on architecture decisions, risks, dependencies, and recommended approaches.
• Contribute reusable architecture patterns, standards, and best practices to the PAM/IAM Center of Excellence.

Required Qualification

• 8+ years of IT experience, with significant expertise in architecting and implementing BeyondTrust solutions across the entire product suite, including:
  • Password Safe (PWS)
  • Privileged Remote Access (PRA)
  • Endpoint Privilege Management (EPM)
  • PMUL
  • Entitle
  • Insights
• Deep understanding of privileged access management, credential management, session management, least privilege, access controls, and privileged identity governance.
• Experience integrating PAM solutions with IAM/IGA, directories, authentication platforms, cloud services, SIEM, and enterprise infrastructure.
• Experience developing solution architectures, integration designs, deployment models, and technical roadmaps.
• Strong analytical, troubleshooting, stakeholder communication, and technical leadership skills.

Preferred Qualifications and Certifications

• BeyondTrust Certified Implementation Engineer (BCIE) Advanced.
• BeyondTrust Certified Password Safe Administration - Advanced.
• BeyondTrust Certified Privileged Remote Access Administration.
• BeyondTrust Certified Endpoint Privilege Management Windows/Mac Administration.

Interview Focus Areas

• Candidates should be prepared to discuss their experience in the following areas:
• BeyondTrust Architecture Design.
• PAM Migration Strategy.
• Active Directory and Microsoft Entra ID Integration.
• Just-in-Time (JIT) Access and Privileged Governance Design.
• Security Controls and Compliance.
• End-to-End Identity and Access Management (IDAM) Architecture.
• Large Enterprise Delivery and Stakeholder Management.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.