IT Security Analyst - BeyondTrust

Apply now: BeyondTrust Security Engineer, Remote. Start date is ASAP for this 6+ month contract position.

Job Title: BeyondTrust Security Engineer
Location-Type: Remote (CST core working hours)
Start Date: ASAP
Duration: Contract, 6+ months 
Compensation Range: $55-64/hr 
Benefits: Eligible for Health, Dental, Vision, and 401K
Visa Sponsorship: Not eligible for visa sponsorship

Job Description:

• This role supports a ransomware prevention initiative by deploying, configuring, tuning, and operationalizing BeyondTrust Endpoint Privilege Management (EPM) across enterprise Windows and Linux server environments with minimal disruption to production systems.

Job Summary

• Engineer, configure, deploy, and tune BeyondTrust EPM controls across Windows and Linux server environments, supporting both on-premises and cloud-hosted systems.
• Develop and tune privilege-management policies to enforce least privilege while minimizing application, service, and operational interruptions.
• Support a phased wave/ring deployment model, including pre- and post-deployment validation, rollout milestones, coverage targets, and entry/exit criteria.
• Troubleshoot BeyondTrust agent, policy, application compatibility, performance, and enforcement issues across applicable server operating systems.
• Define and validate emergency break-glass administration, rollback, and outage-support procedures prior to enforcement.
• Integrate BeyondTrust health, agent tamper, policy-enforcement, and operational events into approved monitoring and SIEM processes.
• Document configurations, policies, exceptions, troubleshooting procedures, and operational processes, and provide knowledge transfer to internal Security Engineering and Operations teams.

Minimum Requirements:

• Demonstrated hands-on experience implementing and administering BeyondTrust Endpoint Privilege Management (EPM) in enterprise environments.
• Strong understanding of BeyondTrust architecture, agents, policies, application rules, privilege elevation, exception handling, and policy enforcement.
• Demonstrated experience implementing and tuning BeyondTrust on both Windows Server and Linux server environments.
• Strong understanding of Windows administrative groups, service accounts, local administrator privileges, Active Directory, Group Policy, and organizational units.
• Understanding of Linux privilege management, sudo/sudoers, service accounts, administrative workflows, and application dependencies.
• Experience implementing security controls in production environments using phased or ring-based deployment approaches.
• Strong change-management, testing, documentation, and troubleshooting skills with the ability to collaborate across infrastructure, application, and security teams.

Preferred Qualifications:

• Experience with large-scale BeyondTrust deployments covering hundreds or thousands of servers across on-premises and cloud-hosted environments.
• Experience transitioning BeyondTrust policies from monitoring/audit modes into enforced controls and designing least-privilege controls for server administrators and service accounts.
• Experience working on ransomware-resilience, privileged-access-management, or server-hardening initiatives.
• Familiarity with Microsoft Defender, CrowdStrike, SIEM platforms, and vulnerability-management technologies.
• Experience developing operational runbooks and transitioning security platforms from Engineering to Operations, including SIEM integration for privilege-management telemetry.