As a Consultant in the hybrid operate business, you are responsible for adhering to the defined operating procedures and guidelines in operating the identity and access management services in the Managed Services model, which includes the following:

- Administer and support BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Manager, and BeyondTrust Remote Support platforms. Experience in PAM
- Manage privileged account onboarding, credential vaulting, password checkout, and privileged access governance activities.
- Configure and maintain password rotation policies, credential lifecycle processes, and privileged account controls.
- Onboard and Configure Windows and Linux Privileged Accounts with Credential rotation and session management.
- Onboard Service Accounts in BeyondTrust Password Safe along with credential management and propagation.
- Troubleshoot non-standard IAM and PAM issues, including incident, problem, and change activities.
- Lead onboarding of applications, servers (Windows and Linux), and privileged accounts into the BeyondTrust Password Safe platform.
- Configure and manage Password Safe features such as Smart Rules, Discovery, Assets, Directory Queries, Access Policies, and Password Policies.
- Build and support minor enhancements and integrations using APIs and standard platform capabilities.
- Lead routine platform releases, version upgrades, security patches, and hotfix implementation.
- Participate in CAB and change activities, including release validation and rollback coordination.
- Drive root cause analysis and follow-through for recurring production issues.
- Coordinate with internal teams and external vendors to resolve application and platform defects.
- Track SLA performance, operational metrics, and service quality for assigned modules.
- Create and maintain SOPs, runbooks, KB articles, and onboarding documentation.
- Lead incident communications and provide clear status updates to stakeholders across teams.
- Administer Just-in-Time (JIT)



access workflows and privileged access request approvals.
- Support service account lifecycle management, including onboarding, ownership validation, password rotation, and periodic access reviews.
- Configure and maintain endpoint privilege management policies to enforce least privilege controls across enterprise endpoints.
- Monitor privileged sessions, access activities, policy violations, and platform health to identify and address security risks.
- Investigate and resolve privileged access incidents, service requests, authentication failures, and platform-related issues in accordance with defined SLAs.
- Support onboarding of servers, applications, databases, and infrastructure components into the BeyondTrust platform.
- Execute configuration changes, platform upgrades, enhancements, patching activities, and operational maintenance tasks.
- Develop operational reports, governance dashboards, platform documentation, and standard operating procedures.
- Collaborate with infrastructure, application, security, audit, and compliance teams to improve privileged access controls and operational effectiveness.
- Train junior team members and support knowledge transfer within the IAM/PAM operations team.

Required:
- Minimum 3-8 years of experience in Identity and Access Management (IAM), Privileged Access Management (PAM), or Cyber Security Operations.
- Hands-on experience administering BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Manager, and/or BeyondTrust Remote Support solutions.
- Strong understanding of credential vaulting, password rotation, privileged session management, and privileged account governance.




- Experience implementing and supporting Just-in-Time (JIT) access controls and least privilege principles.
- Experience managing service accounts and privileged identities within enterprise environments.
- Strong knowledge of Active Directory, Microsoft Entra ID, Windows Server, and enterprise authentication concepts.
- Experience supporting privileged account onboarding, access requests, access reviews, and operational support activities.
- Understanding of incident management, problem management, change management, and service request processes.
- Ability to troubleshoot privileged access issues across infrastructure, applications, and identity platforms.
- Candidate should be comfortable in having daily interactions with client regarding BAU and enhancements.
- Robust analytical, documentation, verbal, and written communication skills.
- Must be willing to work 16X5 rotational shifts
- Flexibility to support night, weekend, holiday, and on-call schedules based on project needs.

Preferred:
- Bachelors degree in computer science, information technology, cybersecurity, or related technical field.
- BeyondTrust Certified Implementation Engineer (BCIE)
- Exposure to PRA, PowerBroker, EPM, or related BeyondTrust products
- Experience supporting large-scale enterprise PAM implementations and managed services environments.
- Knowledge of Zero Trust, privileged identity security, and cybersecurity best practices.
- Experience with auditing, compliance, and regulatory requirements related to privileged access management.
- Familiarity with ServiceNow-based workflows, ticketing, and operational governance processes.
- Understanding of cloud privileged access management and hybrid identity environments.
- Security certifications such as CISSP, CISM, Security+, or equivalent are a plus.
- Experience supporting healthcare, life sciences, or other highly regulated environments.

Note: Shift Timing : 2 to 11 pm IST in occasional night shift and on-call support

Work Model :Hybrid

📌 BeyondTrust PAM ConsultantH (Bengaluru)
🏢 Orcapod Consulting Services
📍 Bengaluru