BeyondTrust Architect

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset.

Proud to be recognized as a Culture 100 Award winner, KeyData Cyber is committed to building a workplace where people feel valued, supported, and empowered to grow. Our culture is rooted in collaboration, innovation, and continuous learning, creating opportunities for our people to thrive and make a meaningful impact.

Join an award-winning team where your ideas matter, your growth is supported, and your contributions make a difference.

As a BeyondTrust Architect, you will be a key member of our Delivery Services Team, responsible for designing and delivering enterprise Endpoint Privilege Management (EPM) solutions. You will work closely with clients to define EPM strategy, architecture, and implementation roadmaps, while providing technical leadership across least privilege, application control, privilege elevation, and endpoint security.

Location: USA, Remote

Employment Type: Full-Time 

What You’ll Do:

• Define and design enterprise EPM architecture, strategy, standards, governance, and implementation roadmaps aligned with Zero Trust and least-privilege principles.
• Assess existing endpoint privilege environments and design target-state solutions covering privilege elevation, application control, policy management, exception handling, and removal of local administrator rights.
• Lead client architecture discussions, technical workshops, solution design, and implementation planning, translating business and security requirements into scalable EPM solutions.
• Design integrations between EPM and enterprise technologies including Active Directory/Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms.
• Provide technical leadership throughout EPM deployments, including design, testing, troubleshooting, production rollout, and operational handover.
• Develop architecture and technical design documentation and provide mentoring and technical guidance to delivery teams.

Who We’re Looking For:

• 8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles, with significant enterprise EPM experience.
• Strong hands-on experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation.
• 5+ years of experience designing EPM architectures, developing security strategies and roadmaps, and translating business requirements into technical solutions.
• Strong understanding of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls.
• Experience integrating EPM solutions with IAM, MFA, SIEM, ITSM, endpoint management, and other enterprise security technologies.
• Strong consulting, communication, documentation, problem-solving, and stakeholder-management skills, with the ability to lead technical discussions with both technical and business stakeholders.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.

Nice-to-Have Skills:

• BeyondTrust certifications
• Experience with BeyonTrust PAM in addition to EPM
• Experience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms
• PowerShell, Python, Bash, APIs, or automation experience
• Experience with Zero Trust architecture and enterprise security frameworks
• CISSP, CISM, or other relevant industry certifications #LI-RR1

Why You’ll Love Working Here

At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request. 

Fraud Prevention & Identity Verification

We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third-party service providers as part of our standard application screening process.

Apply now to join the  KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.