BeyondTrust Password Safe Onboarding Expert

I need an experienced BeyondTrust / BeyondInsight PRA and Password Safe specialist to bring my entire estate under tight privileged-access control. The immediate task is to onboard our Linux/Unix hosts, Windows servers, and multiple database platforms into BeyondTrust Password Safe, ensuring every privileged account is discovered, vaulted, and rotated correctly.

Once the assets are inside the vault, you will configure the core controls that keep us compliant and audit-ready: Smart Rules, Discovery and Asset groups, Directory Queries, plus the full set of Access and Password Policies that map to our internal security standards. Session recording and detailed logging must be enabled end-to-end so we can trace activity without gaps.

Operational stability is critical, so you will also handle troubleshooting across IAM and PAM layers, covering incident, problem, and change management workflows as they arise. Part of the engagement includes applying any required upgrades, patches, and hotfixes, as well as supporting future appliance deployments or migration exercises.

Deliverables:
• All Linux/Unix, Windows, and database privileged accounts successfully onboarded and verified
• Access Policies, Password Policies, and Directory Queries implemented and documented
• Session recording, logging, and reporting tested and functional
• Knowledge-transfer session and runbook covering onboarding steps, policy logic, and common break-fix scenarios

If you have deep, hands-on expertise with BeyondTrust Password Safe and can own this work from discovery through to steady state, I’d like to hear how you would approach the project and your estimated timeline.