BeyondTrust Architect (Endpoint Privilege Management)

Location: Canada, Remote

Base salary: CAD $140,000–$160,000 per year, plus eligibility for a bonus program.

Company

hirify.global is an IAM professional services firm specializing in designing, deploying, and managing identity and access management programs across North America.

What you will do

• Define enterprise Endpoint Privilege Management architecture, strategy, standards, governance, and implementation roadmaps.
• Assess endpoint privilege environments and design solutions for privilege elevation, application control, policy management, exception handling, and removal of local administrator rights.
• Lead client architecture discussions, technical workshops, solution design, and implementation planning.
• Design integrations with Active Directory, Entra ID, IAM, MFA, endpoint management, SIEM, ITSM, and other security platforms.
• Provide technical leadership across design, testing, troubleshooting, production rollout, and operational handover.
• Create architecture documentation and mentor delivery teams.

Requirements

• 8+ years of experience in cybersecurity, endpoint security, PAM, IAM, or related security architecture roles.
• Significant enterprise experience with BeyondTrust Endpoint Privilege Management, including architecture, policy design, application control, privilege elevation, and least-privilege implementation.
• 5+ years of experience designing EPM architectures, security strategies, and implementation roadmaps.
• Strong knowledge of Windows endpoint security, Active Directory/Entra ID, Group Policy, endpoint management, application security, and enterprise security controls.
• Experience integrating EPM with IAM, MFA, SIEM, ITSM, endpoint management, and related technologies.
• Strong consulting, communication, documentation, problem-solving, and stakeholder-management skills, plus a degree in Computer Science, Cybersecurity, Information Technology, or equivalent experience.

Nice to have

• BeyondTrust certifications and experience with BeyondTrust PAM.
• Experience with Microsoft Intune, SCCM, Jamf, or other endpoint management platforms.
• PowerShell, Python, Bash, API, or automation experience.
• Zero Trust architecture, enterprise security frameworks, CISSP, or CISM certification.

Culture & Benefits

• Opportunities to work on digital identity projects across North America.
• Focus on learning, career growth, and work-life balance.
• Respectful, inclusive, and equal-opportunity workplace.
• Accessibility accommodations are available throughout the recruitment and assessment process.