BeyondTrust PAM Implementation Consultant
- Location: Ottawa, Ontario
- Remote: Remote
- Type: Contract
- Job #35719
Myticas Consulting is recruiting an experienced BeyondTrust Privileged Access Management Implementation Consultant for our Ottawa client.
The consultant will provide hands-on implementation, configuration and operational support across the BeyondTrust PAM platform. The work will include Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle and Insights, enterprise integrations, privileged-account onboarding and knowledge transfer.
Core Responsibilities
- Support the development of the long-term PAM operating model and associated technical-support processes.
- Identify operational dependencies and requirements for ongoing platform administration.
- Perform hands-on configuration of BeyondTrust Password Safe, Privileged Remote Access, Endpoint Privilege Management and Entitle.
- Configure policies, workflows, credential and password rotation, discovery, Smart Rules, RBAC, session settings and reporting.
- Configure and troubleshoot integrations with Active Directory, Entra ID/Azure AD, LDAP, SAML, MFA, SIEM, ITSM and other enterprise services.
- Support the onboarding of users, privileged accounts, service accounts, servers, endpoints, network devices, databases, applications and third-party vendors.
- Support the phased rollout of BeyondTrust capabilities.
- Develop technical documentation, runbooks, configuration standards and operational procedures.
- Provide hands-on knowledge transfer to Canadian Blood Services technical and operational resources throughout the implementation.
- Participate in technical workshops with multiple teams.
- Work directly with BeyondTrust to resolve issues and obtain product-specific guidance when required.
Preferred Skills and Experience
- Direct experience with BeyondTrust Password Safe, Privileged Remote Access, Endpoint Privilege Management, Entitle and Insights.
- Experience deploying Resource Brokers, gateways, Jump Clients and agents.
- Experience designing and running discovery scans.
- Experience configuring Smart Rules, custom platforms, RBAC, session management and reporting within Password Safe.
- Experience designing and deploying EPM agents, group policies, content groups and custom tokens across Windows, macOS and Linux.
- Experience deploying Active Directory Bridge.
- Experience configuring and onboarding Windows and Linux systems, network devices, service accounts, privileged accounts, databases and applications.
- Experience integrating PAM solutions with Active Directory, Entra ID, LDAP, SAML, MFA and enterprise authentication services.
- Experience integrating PAM platforms with SIEM, Syslog and ITSM solutions.
- Experience establishing privileged access management for enterprise infrastructure and network devices using BeyondTrust, Cisco ISE and TACACS+.
- Experience supporting break-glass access, least-privilege controls, vendor access and privileged-account management processes.
- Strong troubleshooting, documentation, workshop facilitation and knowledge-transfer capabilities.