BTPM L3 Engineer – Privilege Management

BTPM L3 Engineer – Privilege Management

Raritan, NJ 08869 (Onsite)

Contract

Job description:

• We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints.
• The role involves managing, optimizing, and supporting enterprise grade privileged access controls while acting as a technical escalation point for complex issues.
• The candidate will play a key role in ensuring secure, compliant, and stable privileged access operations.

Key Responsibilities

• Provide L3 support and technical ownership for BeyondTrust Privilege Management (BTPM) across servers and user machines.
• Design, implement, and maintain least privilege policies for Windows, Linux/Unix, and end user endpoints.
• Act as the final escalation point for complex privilege related incidents and access issues.
• Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
• Ensure compliance with security standards, audits, and regulatory requirements.
• Drive privilege reduction initiatives while balancing security and user productivity.
• Support changes, upgrades, and continuous improvements of the BTPM platform.
• Create and maintain operational documentation, SOPs, and knowledge articles.
• Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.

Required Skills & Qualifications

Technical Skills

• Strong hands-on experience with BeyondTrust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
• In-depth knowledge of:
• Windows servers and workstations (admin controls, policies)
• Linux/Unix privilege models (sudo, PAM, permissions)
• Experience managing server and endpoint-level privilege access in enterprise environments.
• Strong troubleshooting and root cause analysis skills.

Professional Skills

• Excellent communication and documentation skills.
• Ability to work independently and manage high priority production issues.
• Experience working in ITSM / SLA driven support environments.

Good to Have

• Exposure to PAM tools like CyberArk EPM.
• Scripting knowledge (PowerShell, Bash).
• ITIL or security related certifications.

Level Expectation

• Acts as Technical SME for Privilege Management.
• Owns complex incidents and ensures end to end resolution.
• Contributes to platform stability, security posture, and process improvement.