EPM Engineer

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.
• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.
• Analyse application requirements and define appropriate privilege management solutions.
• Troubleshoot complex endpoint privilege management and application control issues.
• Develop, test, and deploy policy changes while maintaining operational stability and security.
• Support the onboarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.
• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.
• Produce and maintain technical documentation, support procedures, and operational standards.
• Contribute to continuous improvement initiatives and platform optimisation activities.

Technologies:

• Support
• ITIL
• Microsoft Intune
• PowerShell
• Security
• Windows, We are recruiting two experienced BeyondTrust Endpoint Privilege Management (EPM) Engineers for a contract role based in Manchester, working onsite five days per week. This is a 3-month opportunity inside IR35, offering a day rate of £440 to £540. You will join a secure enterprise environment supporting a large-scale, highly customised endpoint privilege management estate. We value diversity, inclusion, and partnership, and we welcome applications from people of all backgrounds. If you need any adjustments during the recruitment process, we encourage you to let us know so we can support you.

• Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) administration and engineering.
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of Windows desktop operating systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy administration.
• Ability to analyse software requirements and design effective privilege management solutions.
• Experience supporting highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis skills.
• Experience working within secure, controlled, or highly regulated environments.
• Strong documentation and technical communication skills.
• Ability to work independently in a complex operational setting.
• Eligibility for BPSS clearance.
• Ability to work 5 days per week onsite in Manchester or Inverness.
• Availability to participate in a 24x7 support rota.
• Desirable: Experience with CyberArk Endpoint Privilege Manager (EPM).
• Desirable: Experience migrating between endpoint privilege management platforms.
• Desirable: Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions.
• Desirable: PowerShell scripting and automation experience.
• Desirable: Experience supporting large-scale enterprise endpoint estates.
• Desirable: Familiarity with ITIL-based operational environments.
• Desirable: Experience working within secure facilities or restricted-access environments.