BTPM L3 Engineer – Privilege Management - Raritan, NJ 08869

BTPM L3 Engineer – Privilege Management

Location:

Raritan, NJ 08869

Mode:
Contract (6+ Months) – Onsite

Job description:

We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints. The role involves managing, optimizing, and supporting enterprise-grade privileged access controls while acting as a technical escalation point for complex issues. The candidate will play a key role in ensuring secure, compliant, and stable privileged access operations.

• Provide L3 support and technical ownership for Beyond Trust Privilege Management (BTPM) across servers and user machines.
• Design, implement, and maintain least-privilege policies for Windows, Linux/Unix, and end-user endpoints.
• Act as the final escalation point for complex privilege-related incidents and access issues.
• Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
• Ensure compliance with security standards, audits, and regulatory requirements.
• Drive privilege reduction initiatives while balancing security and user productivity.
• Support changes, upgrades, and continuous improvements of the BTPM platform.
• Create and maintain operational documentation, SOPs, and knowledge articles.
• Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.

Technical Skills

• Strong hands-on experience with Beyond Trust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
• In-depth knowledge of:
• Windows servers and workstations (admin controls, policies)
• Linux/Unix privilege models (sudo, PAM, permissions)
• Experience managing server and endpoint-level privilege access in enterprise environments.
• Strong troubleshooting and root-cause analysis skills.

Professional Skills

• Excellent communication and documentation skills.
• Ability to work independently and manage high-priority production issues.
• Experience working in ITSM / SLA-driven support environments.

• Exposure to PAM tools like Cyber Ark EPM.
• Scripting knowledge (Power Shell, Bash).
• ITIL or security-related certifications.

• Acts as Technical SME for Privilege Management.
• Owns complex incidents and ensures end-to-end resolution.
• Contributes to platform stability, security posture, and process improvement.