BeyondTrust Endpoint Privilege Management (EPM) Engineer (2 Open Positions)

Anticipated Contract End Date/Length: 3-5 months contract
Work Setup: Onsite (5 days per week in secure facility) Manchester and Inverness
Clearance Required: BPSS eligibility required

Our client in the Information Technology and Services industry is looking for a BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale highly customised EPM deployment within a secure enterprise environment.

The successful candidates will work closely with Application Packaging and Endpoint Engineering teams providing expert-level support administration troubleshooting and policy engineering across the BeyondTrust EPM platform. The environment contains significant customisation and requires individuals capable of understanding complex privilege management policies application control requirements and endpoint security configurations.

Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered provided they are willing to cross-train into BeyondTrust EPM. The role operates within secure facilities in either Inverness or Manchester and requires participation in a 24x7 operational shift rota.

What you will do:

• Administer support and maintain a heavily customised BeyondTrust Endpoint Privilege Management (EPM) environment.
• Collaborate with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications.
• Design implement and maintain EPM policies governing privilege elevation application control allowlisting and endpoint security.
• Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages.
• Troubleshoot complex EPM-related issues impacting application deployment user productivity or endpoint security controls.
• Develop test and implement policy changes while maintaining security and operational stability.
• Support the onboarding of new applications into the EPM estate and remediate privilege-related application issues.
• Investigate and resolve incidents relating to privilege elevation application execution and endpoint control policies.
• Coordinate with packaging teams infrastructure teams and security stakeholders to ensure application compatibility within EPM-controlled environments.
• Maintain technical documentation operating procedures support guides and policy standards.
• Participate in out-of-hours support and 24x7 shift coverage as required.
• Support continuous improvement initiatives and optimise the BeyondTrust EPM platform.

Qualifications :

• Bring extensive hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM).
• Possess a strong understanding of Windows endpoint security architecture.
• Demonstrate experience creating modifying and troubleshooting BeyondTrust EPM policies.
• Bring proven experience supporting application packaging and software deployment processes.
• Possess strong knowledge of Windows Desktop Operating Systems application control privilege elevation endpoint security software packaging and deployment and Group Policy Administration.
• Demonstrate the ability to analyse application requirements and define appropriate privilege management solutions.
• Bring experience supporting highly customised enterprise EPM platforms.
• Apply strong troubleshooting and root cause analysis skills to complex endpoint and privilege management issues.
• Possess experience working within secure controlled or highly regulated environments.
• Demonstrate excellent documentation and technical communication skills.
• Show the ability to work independently within a complex operational environment.
• Bring experience with CyberArk Endpoint Privilege Manager (EPM) preferably.
• Possess experience migrating between EPM platforms preferably.
• Demonstrate knowledge of Microsoft Intune MECM/SCCM or equivalent endpoint management platforms preferably.
• Bring PowerShell scripting and automation experience preferably.
• Possess experience supporting large-scale enterprise endpoint environments.
• Demonstrate familiarity with ITIL-based operational environments.
• Bring experience working within secure facilities or restricted-access environments.
• Show willingness to cross-train into BeyondTrust EPM where CyberArk EPM provides the primary professional background.
• Demonstrate willingness to work from a secure facility in either Inverness or Manchester and participate in a 24x7 support rota.

Additional Information :

Candidates must be legally authorized to live and work in the country where the position is based without requiring employer sponsorship.

HelloKindred is committed to fair transparent and inclusive hiring practices. We assess candidates based on skills experience and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race colour religion sex gender identity or expression sexual orientation age national origin disability veteran status or any other protected characteristic under applicable law.

Remote Work :

No

Employment Type :

Contract