BeyondTrust Endpoint Privilege Management (EPM) Engineer (2 Open Positions)

HelloKindred; Manchester; On-site; GBP 101,000 - 129,000; Full time

Job summary

HelloKindred is seeking BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised deployment within a secure enterprise environment in Manchester and Inverness. Onsite, 5 days per week, BPSS eligibility required; contract length is 3–5 months.

You will collaborate with Application Packaging and Endpoint Engineering teams to design, implement, and maintain EPM policies, troubleshoot issues, and ensure application compatibility while supporting 24x7

Qualifications

• Strong experience with BeyondTrust EPM or CyberArk Endpoint Privilege Manager.
• Willing to cross-train into BeyondTrust EPM.
• Ability to work in a 24x7 shift rota in secure facilities (Inverness or Manchester).

Responsibilities

• Administer and maintain a heavily customised EPM environment.
• Collaborate with packaging and engineering teams for deployment.
• Design and maintain EPM policies for privilege elevation and application control.
• Analyse applications to determine privilege requirements.
• Troubleshoot complex EPM issues impacting deployment or security controls.
• Coordinate with security stakeholders to ensure compatibility.
• Maintain documentation and support guides.
• Participate in out-of-hours support as required.

Skills

BeyondTrust EPM

CyberArk EPM

Policy engineering

Endpoint security

Job description

Anticipated Contract End Date/Length: 3-5 months contract Work Setup: Onsite (5 days per week in secure facility) Manchester and Inverness Clearance Required: BPSS eligibility requiredOur client in the Information Technology and Services industry is looking for a BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised EPM deployment within a secure enterprise environment.The successful candidates will work closely with Application Packaging and Endpoint Engineering teams, providing expert-level support, administration, troubleshooting, and policy engineering across the BeyondTrust EPM platform. The environment contains significant customisation and requires individuals capable of understanding complex privilege management policies, application control requirements, and endpoint security configurations.Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, provided they are willing to cross-train into BeyondTrust EPM. The role operates within secure facilities in either Inverness or Manchester and requires participation in a 24x7 operational shift rota.

What you will do:

• Administer, support, and maintain a heavily customised BeyondTrust Endpoint Privilege Management (EPM) environment.
• Collaborate with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications.
• Design, implement, and maintain EPM policies governing privilege elevation, application control, allowlisting, and endpoint security.
• Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages.
• Troubleshoot complex EPM-related issues impacting application deployment, user productivity, or endpoint security controls.
• Develop, test, and implement policy changes while maintaining security and operational stability.
• Support the onboarding of new applications into the EPM estate and remediate privilege-related application issues.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint control policies.
• Coordinate with packaging teams, infrastructure teams, and security stakeholders to ensure application compatibility within EPM-controlled environments.
• Maintain technical documentation, operating procedures, support guides, and policy standards.
• Participate in out-of-hours support and 24x7 shift coverage as required.
• Support continuous improvement initiatives and optimise the BeyondTrust EPM platform.