BTPM L3 Engineer Privilege Management

Role: BTPM L3 Engineer Privilege Management
Location: Raritan, NJ 08869 (Onsite)

Job description:
We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints. The role involves managing, optimizing, and supporting enterprisegrade privileged access controls while acting as a technical escalation point for complex issues. The candidate will play a key role in ensuring secure, compliant, and stable privileged access operations.

Key Responsibilities

• Provide L3 support and technical ownership for BeyondTrust Privilege Management (BTPM) across servers and user machines.
• Design, implement, and maintain leastprivilege policies for Windows, Linux/Unix, and enduser endpoints.
• Act as the final escalation point for complex privilegerelated incidents and access issues.
• Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
• Ensure compliance with security standards, audits, and regulatory requirements.
• Drive privilege reduction initiatives while balancing security and user productivity.
• Support changes, upgrades, and continuous improvements of the BTPM platform.
• Create and maintain operational documentation, SOPs, and knowledge articles.
• Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.

Required Skills & Qualifications

Technical Skills

• Strong handson experience with BeyondTrust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
• Indepth knowledge of:
• Windows servers and workstations (admin controls, policies)
• Linux/Unix privilege models (sudo, PAM, permissions)
• Experience managing server and endpointlevel privilege access in enterprise environments.
• Strong troubleshooting and rootcause analysis skills.

Professional Skills

• Excellent communication and documentation skills.
• Ability to work independently and manage highpriority production issues.
• Experience working in ITSM / SLAdriven support environments.

Good to Have

• Exposure to PAM tools like CyberArk EPM.
• Scripting knowledge (PowerShell, Bash).
• ITIL or securityrelated certifications.

Level Expectation

• Acts as Technical SME for Privilege Management.
• Owns complex incidents and ensures endtoend resolution.
• Contributes to platform stability, security posture, and process improvement.