Endpoint Privilege Management Engineer

Salary: £40,000 - 70,000 per year

Requirements:

• Strong hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM).
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment.
• Strong knowledge of Windows desktop operating systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy administration.
• Ability to assess application requirements and develop appropriate privilege management solutions.
• Experience working with highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis capabilities.
• Experience working within secure, controlled or highly regulated environments.
• Strong technical documentation and communication skills.
• Ability to work independently within a complex operational environment.
• Ability to work on-site from either Inverness or Manchester.
• Willingness to participate in a 24x7 support rota.
• Eligibility to undergo UK Security Vetting and meet relevant residency requirements.

Responsibilities:

• Administer, support and maintain a highly customised BeyondTrust EPM environment.
• Design, implement and maintain policies covering privilege elevation, application control and allowlisting.
• Work closely with Application Packaging and Endpoint Engineering teams to support application deployment.
• Analyse application behaviour and identify appropriate privilege management requirements.
• Troubleshoot complex EPM issues affecting application deployment, endpoint security and user productivity.
• Develop, test and implement EPM policy changes while maintaining security and operational stability.
• Support the onboarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution and endpoint control.
• Collaborate with packaging, infrastructure and security teams to ensure application compatibility.
• Carry out root cause analysis and implement appropriate remediation.
• Maintain technical documentation, procedures, support guides and policy standards.
• Contribute to continuous improvement and optimisation of the EPM platform.
• Participate in a 24x7 operational support rota, including out-of-hours support where required.

Technologies:

• Support
• Security
• Windows
• ITIL
• Microsoft Intune
• PowerShell

More:

We are supporting a leading global technology organisation with an exciting opportunity to join a large-scale, highly customised BeyondTrust Endpoint Privilege Management environment operating within a secure enterprise setting. We are looking for an experienced engineer to work closely with Application Packaging, Endpoint Engineering and Security teams. The role is based on-site in Inverness or Manchester, follows a 24x7 operational rota, and offers the opportunity to work in a complex, secure environment with the possibility of cross-training from CyberArk Endpoint Privilege Manager experience into BeyondTrust.

last updated 33 week of 2026