Jobs at BeyondTrust

Designs, secures, operates, and supports multi-account cloud infrastructure across AWS, Azure, and GCP. Responsibilities include AWS networking, Terraform infrastructure as code, GitHub Actions CI/CD pipelines, identity and access management, cloud governance, observability, incident response, disaster recovery, cost optimization, and compliance controls. The role also develops automation, maintains technical documentation, and provides after-hours support when needed.

Build and operate full-stack services for non-human identity governance across cloud and on-premises environments. Responsibilities include developing APIs, backend services, data pipelines, and occasional UI features; owning features through production; participating in design and code reviews; resolving reliability issues; applying secure development, testing, and observability practices; and mentoring engineers.

Design, build, and operate high-throughput, secure backend services and APIs for a cloud-native identity visibility and intelligence platform. Contribute to system design, resiliency, test automation, and production support (including on-call). Deliver scalable microservices, CI/CD-driven deployments, and infrastructure-as-code.

Develop and maintain backend services and database layers for a Password Safe product using C#/.NET. Design, implement, and review scalable, secure APIs and systems; write and review tests; collaborate with product and cross-functional teams; participate in research spikes and AI-driven design; ensure reliability, performance, and secure coding practices.

Design, build, and maintain scalable, performant, and accessible front-end features and dashboards for non-human identity governance. Collaborate with design, product, and backend teams to integrate APIs, optimize data flows, maintain component libraries and design systems, champion accessibility and performance, write well-tested code, and mentor engineers.

Lead architecture and technical direction for the NHI Governance domain, owning complex server-side initiatives to discover, assess, and remediate non-human identities across cloud and on-prem environments. Define standards, interfaces, and contracts; drive quality, security, observability, performance; mentor senior engineers; and partner with product and design to align technical strategy with business goals.

Lead and grow an engineering team to build a platform-native NHI Governance module and scalable, secure services for BeyondTrust's SaaS products. Own delivery, architecture, and quality; partner with product, design, and platform teams; adopt AI-assisted development tools; mentor engineers; and solve identity and security challenges across cloud and on-prem environments.

Lead architecture and implementation of scalable, secure cloud-native microservices for non-human identity governance. Design APIs, data pipelines, observability, and IaC; mentor engineers; drive cross-team technical direction, performance, and operational excellence.

Lead design and implementation of a data-driven, AI-enabled demand engine to diagnose funnel leaks, build orchestration and attribution, and align Demand Gen, Product Marketing, Campaign Management, and Sales to increase measurable pipeline outcomes.

Own and architect Linux kernel-space enforcement for an identity security platform using eBPF and BPF LSM hooks. Build kernel and userspace enforcement boundary, optimize syscall hot paths, extend enforcement to containers and Kubernetes, ensure portability across kernel versions, collaborate on shared policy/backend, mentor engineers, and drive production-grade, low-latency security enforcement.

Own design, implementation, and production support of Windows kernel-mode enforcement drivers (filesystem, process/thread, handles, registry) and the kernel/user-mode enforcement boundary. Reduce enforcement latency at scale, extend enforcement to containers and isolation, ensure compatibility across Windows builds, handle driver signing and deployment, collaborate cross-platform on policy and the Rust userspace agent, and mentor engineers while driving technical direction and operational stability.

Lead macOS endpoint enforcement: design and own userspace agent, synchronous allow/deny path, Network Extension content filtering, performance and stability across macOS versions and hardware, mentor engineers, and represent macOS in cross-platform policy and architecture decisions.

The Salesforce Solution Consultant leads the design of Salesforce solutions, manages multiple projects, collaborates with stakeholders, and ensures effective communication across technical and non-technical teams.

Lead architecture and delivery of highly available, resilient cloud and on‑prem systems for the Password Safe platform. Own platform engineering, CI/CD pipelines, IaC/GitOps, release orchestration, observability (metrics/logs/traces), chaos engineering, SLO/SLI definition, and core services. Mentor engineers, define SRE strategy, and drive reliability, security, and automation improvements.

Develop and maintain the macOS endpoint client for an endpoint security product. Design features, shape architecture, review code (including agentic AI-generated code), improve build/deploy/test automation, resolve customer issues, and track macOS/security technologies while mentoring peers and owning product areas.