Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : BeyondTrust Privileged Access Management

Good to have skills : NA

Minimum 7.5 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:

We are seeking a hands-on Senior Engineer (L8) who combines strong technical expertise with team leadership to drive secure and stable operations of BeyondTrust Endpoint Privilege Management and BeyondTrust Privileged Remote Access.

This role bridges architecture and execution, owning day-to-day operations, handling escalations, and delivering key activities such as PRA upgrades and Jump Point management. You will lead by example contributing technically while guiding engineers, enforcing best practices, and ensuring high service reliability.

Success in this role requires strong problem-solving skills, ownership mindset, and the ability to balance hands-on engineering with effective team coordination and delivery.

Roles & Responsibilities:

- Experience in Beyond Trust Password Safe and PRA with strong hands-on.

-Beyond Trust Implementation Certification is mandatory.

-Strong hands-on experience with Beyond Trust Password Safe, Privileged Access Management (PAM), Privileged Session Management, Beyond Trust EPM, PRA, and Beyond Insight.

-Strong understanding of Windows/Linux systems, Active Directory, LDAP, GPO, networking fundamentals, and enterprise security.

-Experience working in high-availability, multi-node and enterprise PAM environments.

-Strong troubleshooting, problem-solving, incident, escalation, and service-restoration skills.

-Beyond Trust Password Safe

-Hands-on experience with Password Safe administration, architecture, configuration, and operational support.

-Experience with Password Management, Managed Accounts, Account Groups, Access Policy, Smart Rules, and privileged account lifecycle management.

-Experience with Discovery and Onboarding of privileged, service, local, domain, application, and ---infrastructure accounts.

-Experience with Secrets, Secret Safe, and secure management of application, service, database, and infrastructure secrets.

-Experience with Privileged Session Management, Session recording and management, session policies, monitoring, and audit requirements.

-Experience with BeyondInsight monitoring, reporting, logs, alerts, and operational health checks.

ssss

-Integration, Automation & Customization

-Experience with LDAP Integration and Active Directory integration, including authentication, authorization, group/role mapping, SSO, and MFA.

-Experience with Resource Broker configuration, connectivity, troubleshooting, and distributed PAM environments.

-Experience developing/supporting custom plugin solutions and API script / REST API integrations for BeyondTrust.

-Strong PowerShell scripting and automation experience for onboarding, validation, health checks, reporting, and PAM operational activities.

-Experience integrating BeyondTrust with IAM/IGA platforms such as SailPoint IdentityIQ and SIEM platforms such as Splunk.

-EPM / PRA Requirements

-Strong hands-on experience with BeyondTrust Endpoint Privilege Management (EPM), including EPM agent deployments, endpoint upgrades, application control policies, and least-privilege enforcement.

-Strong hands-on experience with BeyondTrust Privileged Remote Access (PRA), including PRA upgrades, Jump Point creation/management, privileged remote access, and troubleshooting.

-Experience supporting endpoint, application, and privileged account onboarding.

-Upgrade, Migration & Engineering

-Proven experience planning and executing Beyond Trust Upgrade and Migration activities, including pre-checks, backups, compatibility validation, implementation, rollback planning, and post-upgrade validation

-Experience with platform upgrades across Password Safe, BeyondInsight, EPM, and PRA environments.

-Experience with PAM migration activities, including account onboarding/migration, policy migration, integrations, validation, and cutover support.

-Ability to create technical documentation, implementation standards, operational procedures, upgrade plans, and troubleshooting guides.

-Team Leadership & Technical Governance

-Ability to lead engineers, allocate technical tasks, provide guidance, perform quality checks, and act as the first-level technical escalation point.

-Ability to mentor engineers on Beyond Trust tools, PAM best practices, troubleshooting, automation, and security standards.

-Experience coordinating with IAM, Infrastructure, Network, Security, Application, and Compliance teams.

-Ensure adherence to operational processes, security standards, SLA requirements, change management, audit, and compliance requirements.

-Microsoft LAPS, AutoIT scripting, IAM fundamentals, SSO, MFA, SailPoint IdentityIQ, Splunk, and enterprise PAM integration experience.

-Experience with CyberArk or other enterprise PAM platforms is an advantage.

-Strong communication, documentation, stakeholder management, and team coordination skills.

-Power shell

Professional & Technical Skills:

-Hands-on experience with Beyond Trust Password Safe and Privileged Access Management.

-Strong experience with Secrets and Secret Safe for secure privileged and application secret management.

-Experience configuring Smart Rules and executing Discovery and Onboarding of privileged accounts and managed systems.

-Experience with Session recording and management and Privileged Session Management, including monitoring and audit requirements.

-Experience with Beyond Insight for monitoring, reporting, logs, alerts, and operational health checks.

-Hands-on experience with Password Management and Access Policy and custom plugin configuration and support.

-Experience developing and supporting API script integrations and automation using Powershell.

-Strong experience with LDAP Integration and Active Directory integration.

-Experience with Resource Broker configuration, connectivity, and troubleshooting.

-Proven experience with BeyondTrust Upgrade and Migration activities, including planning, validation, implementation, and post-upgrade checks.

Additional Information:

- The candidate should have minimum 7.5 years of experience in BeyondTrust Privileged Access Management.

- This position is based at our Bengaluru office.

- A 15 years full time education is required.15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services-creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us atwww.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, militaryveteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicablelaw. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.