Technical Architect (DPO)
Technology, Data & Digital · IT Infrastructure & Security · Cybersecurity · DevOps
In short
We are looking for an experienced BTPM L3 Engineer with expertise in privilege management for servers and user endpoints. This role involves providing L3 support, designing least-privilege policies, and acting as an escalation point for complex privilege-related incidents. The position requires strong technical and professional skills, with experience in ITSM/SLA-driven environments.
Responsibilities
- Provide L3 support and technical ownership for BeyondTrust Privilege Management (BTPM) across servers and user machines.
- Design, implement, and maintain least-privilege policies for Windows, Linux/Unix, and end-user endpoints.
- Act as the final escalation point for complex privilege-related incidents and access issues.
- Support onboarding of applications requiring elevated privileges through policy tuning and optimization.
- Ensure compliance with security standards, audits, and regulatory requirements.
- Drive privilege reduction initiatives while balancing security and user productivity.
- Support changes, upgrades, and continuous improvements of the BTPM platform.
- Create and maintain operational documentation, SOPs, and knowledge articles.
- Mentor L1/L2 engineers and collaborate with Security, Infrastructure, and Endpoint teams.
Requirements
- Strong hands-on experience with BeyondTrust Privilege Management (BTPM) or equivalent endpoint privilege management tools.
- In-depth knowledge of Windows servers and workstations (admin controls, policies).
- In-depth knowledge of Linux/Unix privilege models (sudo, PAM, permissions).
- Experience managing server and endpoint-level privilege access in enterprise environments.
- Strong troubleshooting and root-cause analysis skills.
- Excellent communication and documentation skills.
- Ability to work independently and manage high-priority production issues.
- Experience working in ITSM / SLA-driven support environments.
Desired Qualifications
- Exposure to PAM tools like CyberArk EPM.
- Scripting knowledge (PowerShell, Bash).
- ITIL or security-related certifications.
- Acts as Technical SME for Privilege Management.
- Owns complex incidents and ensures end-to-end resolution.
- Contributes to platform stability, security posture, and process improvement.
Benefits
- Supercharge your potential at HCLTech.
- Find your career and your spark at HCLTech.
- A place that knows that helping its customers stay on top starts by putting its people first.
#BTPM#Privilege Management#L3 Support#Servers#User Endpoints#BeyondTrust#Least Privilege Policies#Windows#Linux#Unix#Security#Compliance#ITSM#SLA#CyberArk