PAM Engineer

Agility Human Resource Management Services

Migrated privileged accounts and security groups from CyberArk to the BeyondTrust platform. This includes collaborating closely with the Active Directory team to configure Group Policies and deploy them to assets within the scope of BeyondTrust. As a member of the PAM practice team, Ive contributed to the migration of 265 application access groups from CyberArk to BeyondTrust.

• Onboarded assets and managed account smart rules to ensure that all privileged accounts and assets are managed under BeyondTrust Passwordsafe.
• Created access policies for user access groups.
• Initiate discovery scans to bring assets, including services and users, under BeyondTrust s management.
• have set up Role-Based Access Control (RBAC) for migrated application access groups in BeyondTrust, configuring AD security groups and assigning the appropriate users. Additionally, I ve created directory queries and asset-based smart rules, such as linking managed accounts and mapping them to smart rules in BeyondTrust Passwordsafe.
• PWS - On boarded and managed privileged accounts across Windows, Linux.
• Provided L3 support for Password Safe, resolving advanced credential injection and password rotation issues across Windows, Linux.
• Supported integration with Active Directory, and Endpoint Credential Manager (ECM).
• Configured Smart Rules and access policies to enforce least privilege and session control.
• Conducted log analysis and troubleshooting for credential retrieval and injection failures.

BeyondTrust Privileged Remote Access

• For BeyondTrust Privileged Remote Access (PRA), I ve configured jump groups, group policies, session policies, and imported jump items according to the respective jump method (e.g., Remote RDP, Jump Client, Shell Jump).
• Diagnosed Jumpoint connectivity issues, including offline status, SSL inspection conflicts, and service startup failures on Linux and Windows hosts.
• Resolved credential injection failures by validating ECM configurations, credential mappings, and integration with Password Safe.
• Supported SAML, LDAP, and authentication issues, including user provisioning, group mapping, and access policy enforcement.
• Remediated remote access failures due to firewall rules, DNS resolution issues.