BTPM L3 Engineer - Privilege Management Job Somerville area,New Jersey USA,IT/Tech

We are seeking an experienced BTPM L3 Engineer with strong expertise in Privilege Management for servers and user endpoints. The role involves managing, optimizing, and supporting enterprise-grade privileged access controls while acting as a technical escalation point for complex issues. The candidate will play a key role in ensuring secure, compliant, and stable privileged access operations.

Key Responsibilities

Provide L3 support and technical ownership for Beyond Trust Privilege Management (BTPM) across servers and user machines.
Design, implement, and maintain least-privilege policies for Windows, Linux/Unix, and end-user endpoints.
Act as the final escalation point for complex privilege-related incidents and access issues.
Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
Ensure compliance with security standards, audits, and regulatory requirements.
Drive privilege reduction initiatives while balancing security and user productivity.
Support changes, upgrades, and continuous improvements of the BTPM platform.
Create and maintain operational documentation, SOPs, and knowledge articles.
Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.

Required Skills & Qualifications

Technical Skills

Strong hands-on experience with Beyond Trust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
In-depth knowledge of:
Windows servers and workstations (admin controls, policies)
Linux/Unix privilege models (sudo, PAM, permissions)
Experience managing server and endpoint-level privilege access in enterprise environments.
Strong troubleshooting and root-cause analysis skills.

Professional Skills

Excellent communication and documentation skills.
Ability to work independently and manage high-priority production issues.
Experience working in ITSM / SLA-driven support environments.

Good to Have

Exposure to PAM tools like Cyber Ark EPM.
Scripting knowledge (Power Shell, Bash).
ITIL or security-related certifications.

Level Expectation

Acts as Technical SME for Privilege Management.
Owns complex incidents and ensures end-to-end resolution.
Contributes to platform stability, security posture, and process improvement.