PAM Engineer

Salary: £48,000 - 88,000 per year

Requirements:

• Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) administration and engineering.
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of Windows Desktop Operating Systems, Application Control, Privilege Elevation, Endpoint Security, Software Packaging and Deployment, and Group Policy Administration.
• Ability to analyse software requirements and design effective privilege management solutions.
• Experience supporting highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis skills.
• Experience working within secure, controlled, or highly regulated environments.
• Strong documentation and technical communication skills.
• Ability to work independently in a complex operational setting.
• Be eligible for BPSS clearance.
• Be able to work 5 days per week onsite in Manchester or Inverness.
• Be available to participate in a 24x7 support rota.
• Experience with CyberArk Endpoint Privilege Manager (EPM).
• Experience migrating between endpoint privilege management platforms.
• Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions.
• PowerShell scripting and automation experience.
• Experience supporting large-scale enterprise endpoint estates.
• Familiarity with ITIL-based operational environments.
• Experience working within secure facilities or restricted-access environments.

Responsibilities:

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.
• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.
• Analyse application requirements and define appropriate privilege management solutions.
• Troubleshoot complex endpoint privilege management and application control issues.
• Develop, test, and deploy policy changes while maintaining operational stability and security.
• Support the onboarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.
• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.
• Produce and maintain technical documentation, support procedures, and operational standards.
• Contribute to continuous improvement initiatives and platform optimisation activities.

Technologies:

• Support
• ITIL
• Microsoft Intune
• PowerShell
• Security
• Windows
• Rust

More:

We are hiring two experienced BeyondTrust Endpoint Privilege Management Engineers for a contract role based in Manchester with 5 days onsite, a rate of £440 - £540 per day inside IR35, and a duration of 3 months. This is an opportunity to support a large-scale, highly customised endpoint privilege management environment within a secure enterprise setting, working closely with Application Packaging, Endpoint Engineering, and Security teams. Candidates with significant CyberArk Endpoint Privilege Manager experience who are interested in cross-training into BeyondTrust EPM are also encouraged to apply. We value respect, equality, diversity, and inclusion, and we support reasonable adjustments during the recruitment process.

last updated 38 week of 2026