IT Security Analyst - BeyondTrust

SCJohnson•Racine, WI

8d•Hybrid

About The Position

The client is seeking a hands-on BeyondTrust Security Engineer to lead deployment, configuration, tuning, and operationalization of Endpoint Privilege Management controls across Windows and Linux server environments in support of a ransomware prevention initiative.

Requirements

Demonstrated hands-on experience implementing and administering BeyondTrust Endpoint Privilege Management in enterprise environments.
Strong understanding of BeyondTrust architecture, agents, policies, application rules, privilege elevation, exception handling, and policy enforcement.
Demonstrated experience implementing and tuning BeyondTrust on both Windows Server and Linux server environments.
Strong understanding of Windows administrative groups, service accounts, local administrator privileges, Active Directory, Group Policy, and organizational units.
Understanding of Linux privilege management, sudo/sudoers, service accounts, administrative workflows, and application dependencies.
Experience implementing security controls in production environments using phased or ring-based deployment approaches.
Strong change-management, testing, documentation, and troubleshooting skills.

Nice To Haves

Experience with large-scale BeyondTrust deployments covering hundreds or thousands of servers.
Experience with both on-premises and cloud-hosted Windows and Linux server environments.
Experience transitioning BeyondTrust policies from monitoring/audit modes into enforced controls.
Experience designing least-privilege controls for server administrators and application/service accounts.
Experience developing automated or repeatable deployment processes for security agents.
Familiarity with Microsoft Defender, CrowdStrike, SIEM platforms, and vulnerability-management technologies.
Experience developing operational runbooks and integrating privilege-management telemetry with SIEM, monitoring, and incident-response processes.

Responsibilities

Engineer, configure, deploy, and tune BeyondTrust Endpoint Privilege Management controls across Windows and Linux server environments.
Develop and tune privilege-management policies to enforce least privilege while minimizing disruption to production applications, services, and operational workflows.
Support a phased wave/ring deployment model, including pre- and post-deployment validation, rollback procedures, and break-glass administration controls.
Evaluate application and administrative activity to determine appropriate allow, elevate, restrict, or exception policies.
Troubleshoot BeyondTrust agent, policy, application compatibility, performance, and enforcement issues across server environments.
Integrate BeyondTrust health, tamper, policy-enforcement, and operational events into the organization's monitoring and SIEM processes.
Deliver operational runbooks and conduct knowledge-transfer sessions with internal Security Engineering and Operations teams.