Job Summary
This role ensures the effective management of identity and privileged access operations using CyberArk PAM solutions. The individual oversees large-scale operational activities, drives continuous improvement initiatives, and leads teams to deliver reliable and secure identity management services, directly impacting client satisfaction and compliance within the organization.
BT PRA Engineer – OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions)
Key Responsibilities
1. Oversee CyberArk PAM (Vault, PVWA, CPM, PSM) operations by implementing advanced monitoring, incident response, and maintenance strategies to ensure platform stability, security, and compliance.
2. Lead identity management operations by defining and optimizing workflows, automating account provisioning/deprovisioning, and enforcing privileged access policies using CyberArk tools.
3. Drive continuous improvement initiatives by analyzing operational metrics, identifying areas for process automation, and integrating new CyberArk features and best practices to enhance service delivery.
4. Manage client relationships by interpreting complex requirements, providing expert-level solutions, and ensuring operational teams consistently meet or exceed SLAs and compliance standards.
5. Mentor and empower support teams by sharing expertise in CyberArk PAM operations, conducting advanced troubleshooting, and delivering targeted training to elevate technical capabilities.
6. Champion innovation in IAM operations by evaluating emerging CyberArk features and industry trends, proposing enhancements, and leading proof-of-concept initiatives to strengthen the organizationâs security posture.
BT PRA Engineer – OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions)
Skill Requirements
1. Excellent Ability To Manage Identity Management Operations, Including Privileged Account Lifecycle, Policy Enforcement, And Automation.
2. Strong Expertise In Monitoring, Incident Response, And Troubleshooting Within Cyberark Environments.
3. Advanced Proficiency In Process Optimization, Workflow Automation, And Continuous Improvement Methodologies.
4. Excellent Communication And Leadership Skills For Mentoring Teams And Managing Client Expectations.
5. Solid Understanding Of Security Compliance Frameworks Relevant To Iam And Pam.
BT PRA Engineer – OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions)
Other Requirements
1. CyberArk Certified Delivery Engineer (CCDE) or CyberArk Guardian certification is highly recommended.
2. Optional: CISSP or CISM certification is valuable for broader security management
BT PRA Engineer – OT Networks Job Summary The BT PRA Engineer is responsible for implementing and supporting BeyondTrust Privileged Remote Access (PRA) solutions across Operational Technology (OT). The role enables secure, controlled, and auditable remote access for internal users, scientists, engineers, and external vendors supporting regulated lab systems, manufacturing platforms, and critical infrastructure. The engineer ensures secure connectivity while maintaining compliance, system availability, and data integrity across validated environments. Responsibilities Design, deploy, and support BeyondTrust PRA solutions for OT and laboratory environments, enabling secure remote access to systems such as MES, LIMS, SCADA, PLC-based utilities, engineering workstations, and analytical lab instruments Manage privileged access workflows for internal teams and third-party vendors, ensuring least-privilege access, session control, and full session recording Integrate PRA with enterprise identity systems including Active Directory and Entra ID, along with broader PAM solutions to enforce secure authentication and authorization Maintain secure segmentation between enterprise IT networks and OT/lab environments, ensuring compliance. Support regulatory and security requirements including GxP principles, data integrity expectations, IEC 62443, and NIST cybersecurity standards Provide operational support and troubleshooting for remote access issues across global manufacturing and R&D sites, ensuring high availability of PRA infrastructure Develop automation scripts (PowerShell or Python) to streamline access provisioning, reporting, and integration with SIEM platforms for monitoring and audit logging o Support and drive Architecture decisions o Define Standard and governance o Influence on onboard strategy (New deployments and Adoptions)