Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer

Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer Location: Manchester OR Inverness (5 DAYS ON-SITE) Salary: £62,000+ Benefits Security Clearance: Eligible for SC Clearance (SOLE BRITISH NATIONAL) Senior BeyondTrust EPM Engineer Opportunity We're seeking an experienced Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer to join a highly secure enterprise environment supporting a large-scale and heavily customised endpoint privilege management deployment.

This is an excellent opportunity for a senior endpoint security specialist who enjoys solving complex technical challenges, working closely with application packaging teams, and shaping endpoint security controls across a critical infrastructure environment.

Candidates with strong CyberArk Endpoint Privilege Manager experience who are open to cross-training into BeyondTrust will also be considered.

As the Senior BeyondTrust EPM Engineer, you will take ownership of the administration, support, and ongoing enhancement of a highly customised BeyondTrust implementation.

Working closely with Application Packaging, Endpoint Engineering, and Security teams, you'll ensure applications are deployed securely while maintaining a seamless user experience. Key Responsibilities

Administer, support, and maintain a large-scale BeyondTrust Endpoint Privilege Management environment.

Design, implement, and optimise privilege elevation and application control policies.

Develop and maintain application allowlisting and endpoint security policies.

Work alongside Application Packaging teams to support software deployment and compatibility requirements.

Analyse application behaviour and determine appropriate privilege management controls.

Troubleshoot complex endpoint privilege and application control issues.

Test and implement policy changes while maintaining stability and security.

Support ongoing platform improvements and operational excellence.

Participate in an on-call support rota.

What We're Looking ForEssential Skills & Experience

Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM).

Strong understanding of Windows endpoint security architecture.

Proven experience creating, modifying, and troubleshooting EPM policies.

Experience supporting application packaging and software deployment processes.

Strong knowledge of

Windows Desktop Operating Systems

Application Control

Privilege Management

Endpoint Security Best Practices

Excellent troubleshooting and problem-solving skills.

Ability to work effectively within complex enterprise environments.

Desirable Skills

CyberArk Endpoint Privilege Manager experience.

Experience migrating between EPM platforms.

Microsoft Intune, MECM/SCCM, or similar endpoint management technologies.

PowerShell scripting and automation.

Experience supporting large-scale enterprise endpoint estates.

Knowledge of ITIL-based service environments.

Experience working within secure or restricted-access environments.

What's on Offer?

Work within a highly secure, enterprise-scale environment.

Exposure to complex endpoint security and privilege management challenges.

Opportunities to collaborate with security, infrastructure, and application delivery specialists.

Ongoing training and professional development.

Career progression within a growing cyber security function.

Flexible and hybrid working arrangements.

Competitive salary and benefits package.

Security Requirements Due to the nature of the work, successful applicants must be eligible to obtain Security Check (SC) Clearance.

Applicants will typically be required to have

Continuous UK residency for the previous 5 years.

The ability to pass pre-employment screening checks.

A suitable employment and background history.