BeyondTrust Endpoint Privilege Management (EPM) Engineer (2 Open Positions)

Job description

Anticipated Contract End Date/Length: 3-5 months contract Work Setup: Onsite (5 days per week in secure facility) Manchester and Inverness Clearance Required: BPSS eligibility required Our client in the Information Technology and Services industry is looking for a BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised EPM deployment within a secure enterprise environment. The successful candidates will work closely with Application Packaging and Endpoint Engineering teams, providing expert-level support, administration, troubleshooting, and policy engineering across the BeyondTrust EPM platform. The environment contains significant customisation and requires individuals capable of understanding complex privilege management policies, application control requirements, and endpoint security configurations. Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, provided they are willing to cross-train into BeyondTrust EPM. The role operates within secure facilities in either Inverness or Manchester and requires participation in a 24x7 operational shift rota. What you will do: Administer, support, and maintain a heavily customised BeyondTrust Endpoint Privilege Management (EPM) environment. Collaborate with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications. Design, implement, and maintain EPM policies governing privilege elevation, application control, allowlisting, and endpoint security. Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages. Troubleshoot complex EPM-related issues impacting application deployment, user productivity, or endpoint security controls. Develop, test, and implement policy changes while maintaining security and operational stability. Support the onboarding of new applications into the EPM estate and remediate privilege-related application issues. Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint control policies. Coordinate with packaging teams, infrastructure teams, and security stakeholders to ensure application compatibility within EPM-controlled environments. Maintain technical documentation, operating procedures, support guides, and policy standards. Participate in out-of-hours support and 24x7 shift coverage as required. Support continuous improvement initiatives and optimise the BeyondTrust EPM platform. Bring extensive hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM). Possess a strong understanding of Windows endpoint security architecture. Demonstrate experience creating, modifying, and troubleshooting BeyondTrust EPM policies. Bring proven experience supporting application packaging and software deployment processes. Possess strong knowledge of Windows Desktop Operating Systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy Administration. Demonstrate the ability to analyse application requirements and define appropriate privilege management solutions. Bring experience supporting highly customised enterprise EPM platforms. Apply strong troubleshooting and root cause analysis skills to complex endpoint and privilege management issues. Possess experience working within secure, controlled, or highly regulated environments. Demonstrate excellent documentation and technical communication skills. Show the ability to work independently within a complex operational environment. Bring experience with CyberArk Endpoint Privilege Manager (EPM), preferably. Possess experience migrating between EPM platforms, preferably. Demonstrate knowledge of Microsoft Intune, MECM/SCCM, or equivalent endpoint management platforms, preferably. Bring PowerShell scripting and automation experience, preferably. Possess experience supporting large-scale enterprise endpoint environments. Demonstrate familiarity with ITIL-based operational environments. Bring experience working within secure facilities or restricted-access environments. Show willingness to cross-train into BeyondTrust EPM where CyberArk EPM provides the primary professional background. Demonstrate willingness to work from a secure facility in either Inverness or Manchester and participate in a 24x7 support rota. Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship. HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements. We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted. HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law. Who is HelloKindred? HelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid. Our vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers – connecting ambitious talent to flexible opportunities with trusted brands.