BeyondTrust EPM PAM Engineer – Onsite Privilege Expert

Sanderson Government & Defence; Manchester; On-site; GBP 81,000 - 100,000; Full time

Job summary

Sanderson Government & Defence seeks two experienced BeyondTrust Endpoint Privilege Management Engineers in Manchester for a 3‑month contract. You will administer a highly customised EPM estate, design privilege policies, and work with security, packaging and endpoint teams to ensure stability and security.

The role requires strong BeyondTrust EPM expertise, Windows endpoint security know‑how, and the ability to operate in a regulated enterprise environment onsite five days a week.

Qualifications

• Extensive hands-on BeyondTrust EPM administration and engineering experience.
• Strong understanding of Windows endpoint security architecture.
• Proven ability to create, modify, and troubleshoot EPM policies.
• Experience supporting application packaging and software deployment processes.

Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage privilege elevation and application control policies.
• Collaborate with packaging and engineering teams for deployment compatibility.
• Analyse software requirements and define privilege management solutions.
• Troubleshoot complex EPM and application control issues.
• Develop, test, and deploy policy changes while maintaining security and stability.
• Onboard new applications into the EPM environment.
• Investigate incidents related to privilege elevation and endpoint security controls.
• Produce technical documentation and operational procedures.
• Contribute to continuous improvement and platform optimisation.

Skills

BeyondTrust EPM administration

Windows endpoint security

Policy design & management

Troubleshooting & root cause analysis

Documentation & communication

Tools

BeyondTrust EPM

CyberArk Endpoint Privilege Manager

Microsoft Intune / MECM

PowerShell

Job description

Sanderson Government & Defence seeks two experienced BeyondTrust Endpoint Privilege Management Engineers in Manchester for a 3‑month contract. You will administer a highly customised EPM estate, design privilege policies, and work with security, packaging and endpoint teams to ensure stability and security.

The role requires strong BeyondTrust EPM expertise, Windows endpoint security know‑how, and the ability to operate in a regulated enterprise environment onsite five days a week.