BTPM L3 Engineer – Privilege Management

BTPM L3 Engineer Privilege Management

Raritan NJ 08869 (Onsite)

Contract

Job description:

• We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints.
• The role involves managing optimizing and supporting enterprise grade privileged access controls while acting as a technical escalation point for complex issues.
• The candidate will play a key role in ensuring secure compliant and stable privileged access operations.

Key Responsibilities

• Provide L3 support and technical ownership for BeyondTrust Privilege Management (BTPM) across servers and user machines.
• Design implement and maintain least privilege policies for Windows Linux/Unix and end user endpoints.
• Act as the final escalation point for complex privilege related incidents and access issues.
• Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
• Ensure compliance with security standards audits and regulatory requirements.
• Drive privilege reduction initiatives while balancing security and user productivity.
• Support changes upgrades and continuous improvements of the BTPM platform.
• Create and maintain operational documentation SOPs and knowledge articles.
• Mentor L1/L2 engineers and collaborate with Security Infrastructure and Endpoint teams.

Required Skills & Qualifications

Technical Skills

• Strong hands-on experience with BeyondTrust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
• In-depth knowledge of:
• Windows servers and workstations (admin controls policies)
• Linux/Unix privilege models (sudo PAM permissions)
• Experience managing server and endpoint-level privilege access in enterprise environments.
• Strong troubleshooting and root cause analysis skills.

Professional Skills

• Excellent communication and documentation skills.
• Ability to work independently and manage high priority production issues.
• Experience working in ITSM / SLA driven support environments.

Good to Have

• Exposure to PAM tools like CyberArk EPM.
• Scripting knowledge (PowerShell Bash).
• ITIL or security related certifications.

Level Expectation

• Acts as Technical SME for Privilege Management.
• Owns complex incidents and ensures end to end resolution.
• Contributes to platform stability security posture and process improvement.