Job Description & Details
This is a hands-on, highly specialized contract role focused entirely on wrangling privileged accounts and securing machine identities using BeyondTrust Password Safe. If you enjoy diving deep into credential rotation, ironing out access policies, and keeping enterprise infrastructure secure without breaking production, this is a solid gig.
What You'll Actually Be Doing
Your day-to-day will revolve around implementing, configuring, and administering BeyondTrust Password Safe to lock down both human and non-human identities. You'll be gathering requirements from various infrastructure and app teams, figuring out account dependencies, and successfully onboarding service, application, and database accounts into the vault. Expect to spend a good amount of time setting up password rotation schedules, configuring session controls, and troubleshooting why a specific connector or credential rotation failed before it causes a headache for downstream services.
The Core Tech Stack
You need deep, practical experience with BeyondTrust Password Safe and a firm grip on Privilege Access Management (PAM) lifecycle principles. Since you'll be dealing with everything from Active Directory to Linux servers and enterprise databases, your foundational knowledge of OS-level authentication and enterprise integrations has to be rock-solid. Experience writing scripts or working with APIs will also give you a massive edge when automating tasks and dealing with tricky machine identities.
Interview Expectations
When you sit down with the hiring manager, expect them to test your war stories regarding failed credential rotations and how you handle service outages caused by locked-out accounts. They will likely ask you to explain your exact methodology for discovering unmanaged privileged accounts in a complex, multi-platform environment. They aren't looking for textbook definitions; they want to hear how you methodically trace dependencies across Windows, Linux, and databases without disrupting the business.
Application Advice
Skip the generic IT resume and make sure BeyondTrust Password Safe, PAM, and credential rotation are right at the top of your experience bullets. Mention specific instances where you successfully onboarded non-human identities, service accounts, or database credentials into a vaulting solution. Highlighting your cross-functional communication skills will also catch their attention, as this role requires heavy coordination with stubborn app and infra teams.