Keyloop bridges the gap between dealers, manufacturers, technology suppliers and car buyers.

We empower car dealers and manufacturers to fully embrace digital transformation. How? By creating innovative technology that makes selling cars better for our customers, and buying and owning cars better for theirs.

We use cutting-edge technology to link our clients’ systems, departments and sites. We provide an open technology platform that’s shaping the industry for the future. We use data to help clients become more efficient, increase profitability and give more customers an amazing experience. Want to be part of it?

Role Summary : The Privileged Access Management Engineer is responsible for the engineering, configuration, integration, and operational enhancement of Keyloop’s Privileged Access Management capability, with a strong focus on BeyondTrust Password Safe. This role will support the design and implementation of PAM controls across infrastructure, databases, cloud platforms, developer environments, privileged accounts, service accounts, secrets, and non-human identities. The engineer will work closely with Security Engineering, IAM, Infrastructure, Cloud Operations, IT, and platform owners to onboard privileged accounts, enforce least privilege, automate lifecycle controls, improve monitoring and audit evidence, and embed PAM as a sustainable business-as-usual security control.

Key Responsibilities : PAM Engineering & BeyondTrust Platform Management

- Engineer, configure, maintain, and optimise BeyondTrust Password Safe and associated PAM components.
- Configure managed systems, managed accounts, access policies, credential rotation, password checkout restrictions, session recording, and approval workflows.
- Develop and maintain PAM platform standards, configuration baselines, runbooks,



and operational procedures.

Privileged Account Discovery, Onboarding & Lifecycle Management

- Support discovery of unmanaged, shared, orphaned, duplicate, stale, and over-privileged accounts across the estate.
- Work with platform owners to define account ownership, access requirements, rotation rules, session controls, and recertification processes.
- Implement lifecycle controls for privileged users, shared accounts, break-glass accounts, service accounts, secrets, keys, and non-human identities.

Integration, Automation & Engineering Improvement

- Integrate PAM with Active Directory, Microsoft Entra ID, cloud IAM, infrastructure platforms, service management workflows, logging platforms, and monitoring tools.
- Develop automation to support account discovery, onboarding, rotation validation, reporting, access reviews, and control assurance.
- Use scripting and APIs to improve PAM operational efficiency, reduce manual effort, and strengthen repeatable engineering processes.
- Support secure integration patterns for DevOps pipelines, automation accounts, secrets management, and non-human identities.

Least Privilege, JIT Access & Control Enforcement

- Support the removal of standing privileged access and implementation of just-in-time access models.
- Configure risk-based approval workflows, time-bound access, session monitoring, and stronger controls for production and critical systems.




- Help define and implement controls that prevent direct privileged login outside approved PAM workflows.

Monitoring, Reporting & Audit Evidence

- Produce PAM reporting on privileged account coverage, rotation status, session activity, onboarding progress, exceptions, break-glass use, and access review outcomes.
- Support audit, compliance, and customer assurance activities by providing accurate evidence of PAM controls and privileged activity.
- Review PAM alerts, session logs, access patterns, and control exceptions to identify issues requiring remediation.
- Track PAM risks, operational issues, and improvement actions through to closure.

Stakeholder Engagement & Continuous Improvement

- Provide technical guidance to administrators and platform owners on PAM onboarding, privileged account handling, secrets management, and secure access patterns.
- Contribute to the maturity of Keyloop’s PAM operating model, including processes, governance, ownership, reporting, and support handover.
- Stay current with PAM, IAM, cloud security, privileged threat, and BeyondTrust platform developments.

Required Experience & Qualifications :

- 4-7 years of experience in Privileged Access Management, Identity and Access Management, security engineering, infrastructure security, or a related technical security role.
- Hands-on engineering experience with BeyondTrust Password Safe, including configuration, onboarding, credential rotation, access policies, session recording, reporting, and operational support.
- Robust understanding of privileged access risks, least privilege, just-in-time access, break-glass processes, secrets management, and privileged session monitoring.
- Experience with scripting, auto

📌 Privileged Access Management Engineer (Hyderabad)
🏢 Keyloop
📍 Hyderabad