If you want to maintain all of your requirements, there is no 3rd party solution out there (Pharos or otherwise) that will work. We all spool a job off somewhere and hold it until the user authenticates for release. If you want to manage access, allow for department-level reporting, and "secure" release, you will be constrained to the device-centric solutions provided by the original manufacturer. This means that if you have more than one brand in your environment, you will have to manage multiple systems.
Why the need to "stay away" from a spooled solution?