Just-in-time access to remote into servers

Hi all, wondering what you all use for JIT remote access for your technical teams/system admins? Looking for recommendations.

**Our current setup:** each tech has a separate admin account which always has admin access to our fleet of servers (hybrid on-prem and cloud). The passwords on each admin account are auto-generated, super long and rotated monthly. From a network/firewall perspective, all remote access is blocked except from our Beyond Trust broker systems (jumpboxes essentially).

**The downsides to our current setup …

access account admin auto cloud current cybersecurity fleet generated hybrid jit just-in-time on-prem passwords recommendations remote access servers setup super system teams tech technical