BeyondTrust Architect

As a BeyondTrust Architect, you will be a key member of our Delivery Services Team, responsible for designing and delivering enterprise Endpoint Privilege Management (EPM) solutions. You will work closely with clients to define EPM strategy, architecture, and implementation roadmaps, while providing technical leadership across least privilege, application control, privilege elevation, and endpoint security.

Location: Canada, Remote

Employment Type: Full-Time

Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway.

What You’ll Do:

• Define and design enterprise EPM architecture, strategy, standards, governance, and implementation roadmaps aligned with Zero Trust and least-privilege principles.
• Assess existing endpoint privilege environments and design target-state solutions covering privilege elevation, application control, policy management, exception handling, and removal of local administrator rights.
• Lead client architecture discussions, technical workshops, solution design, and implementation planning, translating business and security requirements into scalable EPM solutions.
• Design integrations between EPM and enterprise technologies including Active Directory/Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms.
• Provide technical leadership throughout EPM deployments, including design, testing, troubleshooting, production rollout, and operational handover.
• Develop architecture and technical design documentation and provide mentoring and technical guidance to delivery teams.

Who We’re Looking For:

• 8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles, with significant enterprise EPM experience.
• Strong hands-on experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation.
• 5+ years of experience designing EPM architectures, developing security strategies and roadmaps, and translating business requirements into technical solutions.
• Strong understanding of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls.
• Experience integrating EPM solutions with IAM, MFA, SIEM, ITSM, endpoint management, and other enterprise security technologies.
• Strong consulting, communication, documentation, problem-solving, and stakeholder-management skills, with the ability to lead technical discussions with both technical and business stakeholders.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience.

Nice-to-Have Skills:

• BeyondTrust certifications
• Experience with BeyonTrust PAM in addition to EPM
• Experience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms
• PowerShell, Python, Bash, APIs, or automation experience
• Experience with Zero Trust architecture and enterprise security frameworks
• CISSP, CISM, or other relevant industry certifications

Compensation:

The base salary range for this position is CAD $140,000 – $160,000. The final base salary offered will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. Eligible individuals may also participate in our bonus program. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization.#LI-RR1