Security Engineer, BeyondTrust

Responsibilities:

• Responsible for implementing part or all the technical solution to the client, in accordance with an agreed technical design. Occasionally responsible for providing a detailed technical design for enterprise solutions. 
• Understands a broad spectrum of Privileged Access Management technology to provide part or all detailed technical design which meets customer requirements. 
• Develop maintainable, scalable, and secure source code that meets business requirements and team standards. 
• Able to communicate and present complex issues with assurance and confidence. Demonstrates the use of consulting skills including questioning, listening, ideas development, rapport, and influencing. 
• Able to discuss (within own area of expertise) requirements with a customer, and to challenge and clarify when appropriate. From the requirements, able to develop a high-level design or plan, and then estimate the amount of effort required to deliver. Able to advise the engagement owner about the risks associated with this work package

Requirements:

• Strong hands-on experience in administering and supporting CyberArk and BeyondTrust Password Safe across on-premises and SaaS environments.
• Proven expertise in onboarding and managing a wide range of privileged accounts across Windows, Unix/Linux, databases (Oracle, Sybase, MSSQL, MySQL), cloud platforms (AWS, Azure), web applications, network/security devices, and legacy systems like AS400.
• Skilled in integrating PAM solutions with Active Directory / Azure AD, SIEM tools, ticketing systems (e.g., ServiceNow) and implementing multi-factor authentication.
• Experience configuring Discovery and Scheduled Scans to detect unmanaged assets and accounts.
• Proficient in managing policies, Smart Rules, and workflows for assets, managed systems, and accounts across both platforms.
• Experience in automating account lifecycle management using built-in features like Smart Rules or policy-based automation.
• Capable of performing global configurations, managing platform plugins/connectors, and handling resource broker configurations.
• Experience in performing upgrades, patching, and applying security fixes, including resource broker management and system maintenance best practices.
• Conduct regular health checks and monitoring of PAM infrastructure (web portals, connectors, broker servers) to ensure consistent system availability.
• Familiar with ITIL processes: Incident Management, Problem Management, Configuration Management and Change Management.
• Strong troubleshooting skills with the ability to assess issue severity, provide timely resolutions, and conduct root cause analysis (RCA).
• Proficient in creating and maintaining technical documentation and operational procedures.
• Provide operational support on 8x5 and support 24/7 rotational support if the project demands.
• Mandatory Certification: BeyondTrust Password Safe Administration & CyberArk Defender Engineer.

Add-on (Key Values)

• Knowledge/Experience on Privilege Management for Window/Unix, Privileged Remote access, Remote Support, Secret safe and Identity Security Insights.
• Experience in integrating various DevOps tools like Jenkins, Ansible, Kubernetes, OpenShift, Gitlab, and Terraform.