Senior Administrator - Thycotic Privilege Manager, Azure Active Directory

Hyderabad, Telangana

Job Summary

OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D; sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions) o PRA onboard lifecycle management o Risk assessment and exception handling o Session monitoring / investigation support o Incident response alignment o Audit evidence readiness o Risk-based access approvals o External connectivity governance o Automation mindset and API integrations Requirements Hands-on experience with BeyondTrust Privileged Remote Access (PRA) or similar PAM solutions (e.g., CyberArk) Strong understanding of OT in regulated industries Experience supporting systems such as SCADA, PLCs, MES, LIMS, or industrial/analytical lab instrumentation Knowledge of identity and access management systems including Active Directory and Entra ID Familiarity with network segmentation, secure remote access architecture, and IT/OT boundary design Understanding of regulatory environments including GMP, GxP, and cybersecurity frameworks such as IEC 62443 and NIST Basic scripting skills in PowerShell or Python for automation and operational support Knowledge of Zero Trust architecture in OT Preferred Qualifications Exposure to OT cybersecurity tools (e.g., Nozomi, Claroty, Dragos) Experience with SIEM platforms such as Splunk or Microsoft Sentinel Knowledge of validated systems and audit-controlled environments Certifications such as GICSP, CISSP, or vendor certifications in BeyondTrust or PAM technologies Soft Skills o Lead deployments o Interface with sites o Influence stakeholders

Key Responsibilities

OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID,



along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D; sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions) o PRA onboard lifecycle management o Risk assessment and exception handling o Session monitoring / investigation support o Incident response alignment o Audit evidence readiness o Risk-based access approvals o External connectivity governance o Automation mindset and API integrations Requirements Hands-on experience with BeyondTrust Privileged Remote Access (PRA) or similar PAM solutions (e.g., CyberArk) Strong understanding of OT in regulated industries Experience supporting systems such as SCADA, PLCs, MES, LIMS, or industrial/analytical lab instrumentation Knowledge of identity and access management systems including Active Directory and Entra ID Familiarity with network segmentation, secure remote access architecture, and IT/OT boundary design Understanding of regulatory environments including GMP, GxP, and cybersecurity frameworks such as IEC 62443 and NIST Basic scripting skills in PowerShell or Python for automation and operational support Knowledge of Zero Trust architecture in OT Preferred Qualifications Exposure to OT cybersecurity tools (e.g., Nozomi, Claroty, Dragos) Experience with SIEM platforms such as Splunk or Microsoft Sentinel Knowledge of validated systems and audit-controlled environments Certifications such as GICSP, CISSP, or vendor certifications in BeyondTrust or PAM technologies Soft Skills o Lead deployments o Interface with sites o Influence stakeholders

Skill Requirements

OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D; sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions)



o PRA onboard lifecycle management o Risk assessment and exception handling o Session monitoring / investigation support o Incident response alignment o Audit evidence readiness o Risk-based access approvals o External connectivity governance o Automation mindset and API integrations Requirements Hands-on experience with BeyondTrust Privileged Remote Access (PRA) or similar PAM solutions (e.g., CyberArk) Strong understanding of OT in regulated industries Experience supporting systems such as SCADA, PLCs, MES, LIMS, or industrial/analytical lab instrumentation Knowledge of identity and access management systems including Active Directory and Entra ID Familiarity with network segmentation, secure remote access architecture, and IT/OT boundary design Understanding of regulatory environments including GMP, GxP, and cybersecurity frameworks such as IEC 62443 and NIST Basic scripting skills in PowerShell or Python for automation and operational support Knowledge of Zero Trust architecture in OT Preferred Qualifications Exposure to OT cybersecurity tools (e.g., Nozomi, Claroty, Dragos) Experience with SIEM platforms such as Splunk or Microsoft Sentinel Knowledge of validated systems and audit-controlled environments Certifications such as GICSP, CISSP, or vendor certifications in BeyondTrust or PAM technologies Soft Skills o Lead deployments o Interface with sites o Influence stakeholders

Other Requirements

OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D; sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (Current deployments and Adoptions) o PRA onboard lifecycle management o Risk assessment and exception handling o Session monitoring / investigation support o Incident response alignment o Audit evidence readiness o Risk-based access approvals o External connectivity governance o Automation mindset and API integrations Requirements Hands-on experience with BeyondTrust Privileged Remote Access (PRA) or similar PAM solutions (e.g., CyberArk) Strong understanding of OT in regulated industries Experience supporting systems such as SCADA, PLCs, MES, LIMS, or industrial/analytical lab instrumentation Knowledge of identity and access management systems including Active Directory and Entra ID Familiarity with network segmentation, secure remote access architecture, and IT/OT boundary design Understanding of regulatory environments including GMP, GxP, and cybersecurity frameworks such as IEC 62443 and NIST Basic scripting skills in PowerShell or Python for automation and operational support Knowledge of Zero Trust architecture in OT Preferred Qualifications Exposure to OT cybersecurity tools (e.g., Nozomi, Claroty, Dragos) Experience with SIEM platforms such as Splunk or Microsoft Sentinel Knowledge of validated systems and audit-controlled environments Certifications such as GICSP, CISSP, or vendor certifications in BeyondTrust or PAM technologies Soft Skills o Lead deployments o Interface with sites o Influence stakeholders

📌 Senior Administrator - Thycotic Privilege Manager, Azure Active Directory (Hyderabad)
🏢 HCLTech
📍 Hyderabad