BTPM L3 Engineer

Experience

6–9 years

Role Overview

We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints. The role involves managing, optimizing, and supporting enterprise‑grade privileged access controls while acting as a technical escalation point for complex issues. The candidate will play a key role in ensuring secure, compliant, and stable privileged access operations.

Key Responsibilities

• Provide L3 support and technical ownership for BeyondTrust Privilege Management (BTPM) across servers and user machines.
• Design, implement, and maintain least‑privilege policies for Windows, Linux/Unix, and end‑user endpoints.
• Act as the final escalation point for complex privilege‑related incidents and access issues.
• Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
• Ensure compliance with security standards, audits, and regulatory requirements.
• Drive privilege reduction initiatives while balancing security and user productivity.
• Support changes, upgrades, and continuous improvements of the BTPM platform.
• Create and maintain operational documentation, SOPs, and knowledge articles.
• Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.

Required Skills & Qualifications

Technical Skills

• Strong hands‑on experience with BeyondTrust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
• In‑depth knowledge of: 
• Windows servers and workstations (admin controls, policies)
• Linux/Unix privilege models (sudo, PAM, permissions)
• Experience managing server and endpoint‑level privilege access in enterprise environments.
• Strong troubleshooting and root‑cause analysis skills.

Professional Skills

• Excellent communication and documentation skills.
• Ability to work independently and manage high‑priority production issues.
• Experience working in ITSM / SLA‑driven support environments.

Good to Have

• Exposure to PAM tools like CyberArk EPM.
• Scripting knowledge (PowerShell, Bash).
• ITIL or security‑related certifications.

Level Expectation

• Acts as Technical SME for Privilege Management.
• Owns complex incidents and ensures end‑to‑end resolution.
• Contributes to platform stability, security posture, and process improvement.