{"id":3209999,"url":"https://alion.io/job/keydatacyber-beyondtrust-architect","title":"BeyondTrust Architect","company":{"id":2671216,"name":"Keydatacyber","domain":"keydatacyber.com","url":"https://alion.io/company/keydatacyber","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Customer Success","role_family":"Customer Success","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":211000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":68},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"BeyondTrust","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-30T19:28:16Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-25T17:55:41Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset.\nProud to be recognized as a Culture 100 Award winner, KeyData Cyber is committed to building a workplace where people feel valued, supported, and empowered to grow. Our culture is rooted in collaboration, innovation, and continuous learning, creating opportunities for our people to thrive and make a meaningful impact.\nJoin an award-winning team where your ideas matter, your growth is supported, and your contributions make a difference.\nAs a BeyondTrust Architect, you will be a key member of our Delivery Services Team, responsible for designing and delivering enterprise Endpoint Privilege Management (EPM) solutions. You will work closely with clients to define EPM strategy, architecture, and implementation roadmaps, while providing technical leadership across least privilege, application control, privilege elevation, and endpoint security.\nLocation: USA, Remote\nEmployment Type: Full-Time \nWhat You’ll Do:\nDefine and design enterprise EPM architecture, strategy, standards, governance, and implementation roadmaps aligned with Zero Trust and least-privilege principles.\nAssess existing endpoint privilege environments and design target-state solutions covering privilege elevation, application control, policy management, exception handling, and removal of local administrator rights.\nLead client architecture discussions, technical workshops, solution design, and implementation planning, translating business and security requirements into scalable EPM solutions.\nDesign integrations between EPM and enterprise technologies including Active Directory/Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms.\nProvide technical leadership throughout EPM deployments, including design, testing, troubleshooting, production rollout, and operational handover.\nDevelop architecture and technical design documentation and provide mentoring and technical guidance to delivery teams.\nWho We’re Looking For:\n8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles, with significant enterprise EPM experience.\nStrong hands-on experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation.\n5+ years of experience designing EPM architectures, developing security strategies and roadmaps, and translating business requirements into technical solutions.\nStrong understanding of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls.\nExperience integrating EPM solutions with IAM, MFA, SIEM, ITSM, endpoint management, and other enterprise security technologies.\nStrong consulting, communication, documentation, problem-solving, and stakeholder-management skills, with the ability to lead technical discussions with both technical and business stakeholders.\nBachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.\nNice-to-Have Skills:\nBeyondTrust certifications\nExperience with BeyonTrust PAM in addition to EPM\nExperience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms\nPowerShell, Python, Bash, APIs, or automation experience\nExperience with Zero Trust architecture and enterprise security frameworks\nCISSP, CISM, or other relevant industry certifications #LI-RR1\nWhy You’ll Love Working Here\nAt KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone.\nAccessibility & Accommodations\nIf you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request. \nFraud Prevention & Identity Verification\nWe may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third-party service providers as part of our standard application screening process.\nApply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.","description_format":"text","description_chars":4865,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Technology","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-24T16:08:13Z"}],"visa":[],"liveness":{"score":72,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.802,"p_room":0.9,"age_days":24,"expected_fill_days":46,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/keydatacyber-beyondtrust-architect","json_url":"https://alion.io/job/keydatacyber-beyondtrust-architect.json","meta":{"generated_at":"2026-10-25T19:51:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28002,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2671216},"rest":"https://alion.io/mcp/rest/get_company?id=2671216"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkeydatacyber-beyondtrust-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkeydatacyber-beyondtrust-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkeydatacyber-beyondtrust-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/keydatacyber-beyondtrust-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkeydatacyber-beyondtrust-architect"}]}