BeyondTrust Architect

Canada
Remote
Posted Oct 2, 2026
1 position

$140,000–$160,000 / year

Opens an external site

Employment type: Full-time
Experience level: Lead · 10+ years
Minimum education: Bachelor’s degree
Posting language: English
Working hours: 40 hours per week

Job summary

You will design and deliver enterprise Endpoint Privilege Management (EPM) solutions while providing technical leadership on least privilege and security architecture. The role involves leading client workshops, developing implementation roadmaps, and ensuring seamless integration with enterprise security platforms.

Job details

At KeyData Cyber, we’re shaping the future of identity security. Recognized by Gartner and KuppingerCole as a leading IAM professional services firm, we specialize exclusively in designing, deploying, and managing end-to-end Identity and Access Management programs for organizations across North America. With 20 years of experience, 50M+ identities managed, and 1,000+ successful deployments, our team is our strongest asset and is built by design to help clients protect critical infrastructure, enable digital transformation, and ensure compliance with confidence. We deliver comprehensive solutions across IAM domains, including: Workforce IAM (Access Management, Identity Governance and Administration, Privileged Access Management) Consumer IAM (Identity Verification, Authentication and Access, Threat Detection) in highly regulated industries. If you’re ready to grow your career alongside some of the industry’s best, come join us — you’re key to our success As a BeyondTrust Architect, you will be a key member of our Delivery Services Team, responsible for designing and delivering enterprise Endpoint Privilege Management (EPM) solutions. You will work closely with clients to define EPM strategy, architecture, and implementation roadmaps, while providing technical leadership across least privilege, application control, privilege elevation, and endpoint security. Location: Canada, Remote Employment Type: Full-Time Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway. What You’ll Do: Define and design enterprise EPM architecture, strategy, standards, governance, and implementation roadmaps aligned with Zero Trust and least-privilege principles. Assess existing endpoint privilege environments and design target-state solutions covering privilege elevation, application control, policy management, exception handling, and removal of local administrator rights. Lead client architecture discussions, technical workshops, solution design, and implementation planning, translating business and security requirements into scalable EPM solutions. Design integrations between EPM and enterprise technologies including Active Directory/Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms. Provide technical leadership throughout EPM deployments, including design, testing, troubleshooting, production rollout, and operational handover. Develop architecture and technical design documentation and provide mentoring and technical guidance to delivery teams. Who We’re Looking For: 8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles, with significant enterprise EPM experience. Strong hands-on experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation. 5+ years of experience designing EPM architectures, developing security strategies and roadmaps, and translating business requirements into technical solutions. Strong understanding of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls. Experience integrating EPM solutions with IAM, MFA, SIEM, ITSM, endpoint management, and other enterprise security technologies. Strong consulting, communication, documentation, problem-solving, and stakeholder-management skills, with the ability to lead technical discussions with both technical and business stakeholders. Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent experience. Nice-to-Have Skills: BeyondTrust certifications Experience with BeyonTrust PAM in addition to EPM Experience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms PowerShell, Python, Bash, APIs, or automation experience Experience with Zero Trust architecture and enterprise security frameworks CISSP, CISM, or other relevant industry certifications Compensation: The base salary range for this position is CAD $140,000 – $160,000. The final base salary offered will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. Eligible individuals may also participate in our bonus program. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization.#LI-RR1 Why You’ll Love Working Here At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance. We offer extensive opportunities to advance your career through leading digital identity projects across North America. Our culture is built on respect, inclusion, and equal opportunity for everyone. Accessibility & Accommodations If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition , and we will make all reasonable efforts to accommodate your request. Fraud Prevention & Identity Verification We may use information provided during the application process to help prevent fraud and verify identity. These checks may be conducted automatically through trusted third‑party service providers as part of our standard application screening process. Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.

What you’ll do

Requirements

Candidates must have over 8 years of experience in cybersecurity or IAM, with significant hands-on expertise in BeyondTrust EPM. A strong background in Windows endpoint security, Active Directory, and enterprise security frameworks is required to translate business needs into scalable technical solutions.