Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer - #2140656

Location: Manchester OR Inverness (5 DAYS ON-SITE)
Salary: £62,000+ Benefits
Security Clearance: Eligible for SC Clearance (SOLE BRITISH NATIONAL)

We're seeking an experienced Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer to join a highly secure enterprise environment supporting a large-scale and heavily customised endpoint privilege management deployment.

This is an excellent opportunity for a senior endpoint security specialist who enjoys solving complex technical challenges, working closely with application packaging teams, and shaping endpoint security controls across a critical infrastructure environment.

Candidates with strong CyberArk Endpoint Privilege Manager experience who are open to cross-training into BeyondTrust will also be considered.

As the Senior BeyondTrust EPM Engineer, you will take ownership of the administration, support, and ongoing enhancement of a highly customised BeyondTrust implementation.

Working closely with Application Packaging, Endpoint Engineering, and Security teams, you'll ensure applications are deployed securely while maintaining a seamless user experience.

• Administer, support, and maintain a large-scale BeyondTrust Endpoint Privilege Management environment.
• Design, implement, and optimise privilege elevation and application control policies.
• Develop and maintain application allowlisting and endpoint security policies.
• Work alongside Application Packaging teams to support software deployment and compatibility requirements.
• Analyse application behaviour and determine appropriate privilege management controls.
• Troubleshoot complex endpoint privilege and application control issues.
• Test and implement policy changes while maintaining stability and security.
• Support ongoing platform improvements and operational excellence.
• Participate in an on-call support rota.

• Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM).
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of:
  • Windows Desktop Operating Systems
  • Application Control
  • Privilege Management
  • Endpoint Security Best Practices
• Excellent troubleshooting and problem-solving skills.
• Ability to work effectively within complex enterprise environments.

• CyberArk Endpoint Privilege Manager experience.
• Experience migrating between EPM platforms.
• Microsoft Intune, MECM/SCCM, or similar endpoint management technologies.
• PowerShell scripting and automation.
• Experience supporting large-scale enterprise endpoint estates.
• Knowledge of ITIL-based service environments.
• Experience working within secure or restricted-access environments.

• Work within a highly secure, enterprise-scale environment.
• Exposure to complex endpoint security and privilege management challenges.
• Opportunities to collaborate with security, infrastructure, and application delivery specialists.
• Ongoing training and professional development.
• Career progression within a growing cyber security function.
• Flexible and hybrid working arrangements.
• Competitive salary and benefits package.

Due to the nature of the work, successful applicants must be eligible to obtain Security Check (SC) Clearance.

Applicants will typically be required to have:

• Continuous UK residency for the previous 5 years.
• The ability to pass pre-employment screening checks.
• A suitable employment and background history.

If you're an experienced BeyondTrust EPM Engineer, Endpoint Security Specialist, or CyberArk EPM professional looking to work on complex enterprise security platforms, we'd be keen to hear from you.

This is a fantastic opportunity to join a security-focused environment where your expertise will play a key role in protecting critical business systems and supporting a mature endpoint security programme.