Implementing Enhanced Security Administrative Environment |administrative Forest | without PAM

Hello,

Is there any advantages or Recommendations for implementing Bastion Forest without Using PAM Tools?

Is it recommended to have this Isolated Environment for authentication for all Systems Administrators <Tiers Model> Taking in Considerations bellow Technologies:

Windows Server 2016 Active Directory Domain Services (AD DS)

Jump Servers in Bastion Forest Used for all Interventions in Productions Environment (SCCM,SCOM,SQL,etc..)

MFA for Jump Servers.

PAW for Tier 0 Admins

Credential Guard in Jump Servers

AppLocker 

LAPS 

Security Compliance Manager (SCM),

Thank You