> Markdown version of [/jobs/ext/2041354-epm-engineer](https://www.wearedevelopers.com/jobs/ext/2041354-epm-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # EPM Engineer - **Company:** Sanderson Recruitment Plc - **Location:** Manchester, UK - **Experience:** Expert - **Salary:** £114,400.0 - £140,400.0 - **Contract:** Temporary contract - **Skills:** Microsoft Windows, Application Packaging, Cyber Security, System Center Configuration Manager, Windows PowerShell, Software Deployment, Software Requirements Analysis, Windows Desktop, Cyberark, Microsoft InTune - **Published:** August 13, 2026 - **Apply:** https://www.totaljobs.com/job/engineer/sanderson-government-and-defence-job107833032 ## About the Role * Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) administration and engineering. * Strong understanding of Windows endpoint security architecture. * Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies. * Experience supporting application packaging and software deployment processes. * Strong knowledge of: + Windows Desktop Operating Systems + Application Control + Privilege Elevation + Endpoint Security + Software Packaging and Deployment + Group Policy Administration * Ability to analyse software requirements and design effective privilege management solutions. * Experience supporting highly customised enterprise EPM environments. * Excellent troubleshooting and root cause analysis skills. * Experience working within secure, controlled, or highly regulated environments. * Strong documentation and technical communication skills. * Ability to work independently in a complex operational setting. Desirable Skills * Experience with CyberArk Endpoint Privilege Manager (EPM). * Experience migrating between endpoint privilege management platforms. * Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions. * PowerShell scripting and automation experience. * Experience supporting large-scale enterprise endpoint estates. * Familiarity with ITIL-based operational environments. * Experience working within secure facilities or restricted-access environments. What's Required? To be considered for this opportunity, you must: ? Be eligible for BPSS clearance ? Be able to work 5 days per week onsite in Manchester or Inverness ? Be available to participate in a 24x7 support rota If you have strong BeyondTrust EPM expertise and are looking to work on a complex, enterprise-scale deployment within a secure environment, apply to be considered. ## Description I'm actively searching for two experienced BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised endpoint privilege management environment within a secure enterprise setting. This is an excellent opportunity for individuals with strong expertise in BeyondTrust EPM, endpoint security, application control, and privilege management. You will work closely with Application Packaging, Endpoint Engineering, and Security teams to ensure the ongoing operation, optimisation, and enhancement of a complex EPM estate. Candidates with significant CyberArk Endpoint Privilege Manager experience who are interested in cross-training into BeyondTrust EPM are also encouraged to apply., * Administer, support, and maintain a highly customised BeyondTrust EPM platform. * Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security. * Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility. * Analyse application requirements and define appropriate privilege management solutions. * Troubleshoot complex endpoint privilege management and application control issues. * Develop, test, and deploy policy changes while maintaining operational stability and security. * Support the on-boarding of new applications into the EPM environment. * Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls. * Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery. * Produce and maintain technical documentation, support procedures, and operational standards. * Contribute to continuous improvement initiatives and platform optimisation activities. ## Related Videos - [Blazor Unleashed: The Future of .NET Web Development](https://www.wearedevelopers.com/videos/1564-blazor-unleashed-the-future-of-net-web-development) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [WinForms Meets WPF: The Hybrid Path to Modern Desktop Applications](https://www.wearedevelopers.com/videos/2040-winforms-meets-wpf-the-hybrid-path-to-modern-desktop-applications) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)