EPM Engineer

Sanderson Government and Defence; Manchester; On-site; GBP 48,000 - 88,000; Full time

Job summary

Sanderson Government and Defence is recruiting two Experienced BeyondTrust Endpoint Privilege Management (EPM) Engineers for a contract role based in Manchester, onsite five days per week. This 3-month IR35 opportunity offers a day rate of £440 to £540.

You will support a large-scale, highly customised EPM estate in a secure enterprise environment, with a focus on privilege elevation, application control, and deployment.

Qualifications

• Extensive hands-on experience with BeyondTrust EPM administration and engineering.
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of Windows desktop operating systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy administration.
• Ability to analyse software requirements and design effective privilege management solutions.
• Experience supporting highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis skills.
• Experience working within secure, controlled, or highly regulated environments.
• Strong documentation and technical communication skills.
• Ability to work independently in a complex operational setting.
• Eligibility for BPSS clearance.
• Ability to work 5 days per week onsite in Manchester or Inverness.
• Availability to participate in a 24x7 support rota.
• Desirable: Experience with CyberArk Endpoint Privilege Manager (EPM).
• Desirable: Experience migrating between endpoint privilege management platforms.
• Desirable: Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions.
• Desirable: PowerShell scripting and automation experience.
• Desirable: Experience supporting large-scale enterprise endpoint estates.
• Desirable: Familiarity with ITIL-based operational environments.
• Desirable: Experience working within secure facilities or restricted-access environments.

Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.
• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.
• Analyse application requirements and define appropriate privilege management solutions.
• Troubleshoot complex endpoint privilege management and application control issues.
• Develop, test, and deploy policy changes while maintaining operational stability and security.
• Support the onboarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.
• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.
• Produce and maintain technical documentation, support procedures, and operational standards.
• Contribute to continuous improvement initiatives and platform optimisation activities.

Skills

BeyondTrust EPM administration

Windows endpoint security architecture

BeyondTrust EPM policies

Application packaging and software部署

Windows Group Policy administration

Privilege elevation

Endpoint security

Software packaging and deployment

Troubleshooting & root cause analysis

Secure, regulated environments

Documentation and technical comms

Independent working in complex ops

BPSS clearance eligibility

Onsite 5 days/wk (Manchester/Inverness

24x7 support rota

CyberArk EPM (desirable)

Migrate between EPM platforms (des.)

Microsoft Intune knowledge (des.)

MECM/SCCM knowledge (des.)

PowerShell scripting (des.)

Large-scale endpoint estates (des.)

ITIL familiarity (des.)

Secure facilities experience (des.)

Tools

PowerShell

Microsoft Intune

MECM/SCCM

Job description

Salary: £48,000 - 88,000 per year

Requirements

• Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) administration and engineering.


• Strong understanding of Windows endpoint security architecture.


• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.


• Experience supporting application packaging and software deployment processes.


• Strong knowledge of Windows desktop operating systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy administration.


• Ability to analyse software requirements and design effective privilege management solutions.


• Experience supporting highly customised enterprise EPM environments.


• Excellent troubleshooting and root cause analysis skills.


• Experience working within secure, controlled, or highly regulated environments.


• Strong documentation and technical communication skills.


• Ability to work independently in a complex operational setting.


• Eligibility for BPSS clearance.


• Ability to work 5 days per week onsite in Manchester or Inverness.


• Availability to participate in a 24x7 support rota.


• Desirable: Experience with CyberArk Endpoint Privilege Manager (EPM).


• Desirable: Experience migrating between endpoint privilege management platforms.


• Desirable: Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions.


• Desirable: PowerShell scripting and automation experience.


• Desirable: Experience supporting large-scale enterprise endpoint estates.


• Desirable: Familiarity with ITIL-based operational environments.


• Desirable: Experience working within secure facilities or restricted-access environments.

Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.


• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.


• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.


• Analyse application requirements and define appropriate privilege management solutions.


• Troubleshoot complex endpoint privilege management and application control issues.


• Develop, test, and deploy policy changes while maintaining operational stability and security.


• Support the onboarding of new applications into the EPM environment.


• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.


• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.


• Produce and maintain technical documentation, support procedures, and operational standards.


• Contribute to continuous improvement initiatives and platform optimisation activities.

Technologies

• Support


• ITIL


• Microsoft Intune


• PowerShell


• Security


• Windows

More

We are recruiting two experienced BeyondTrust Endpoint Privilege Management (EPM) Engineers for a contract role based in Manchester, working onsite five days per week. This is a 3-month opportunity inside IR35, offering a day rate of £440 to £540. You will join a secure enterprise environment supporting a large-scale, highly customised endpoint privilege management estate. We value diversity, inclusion, and partnership, and we welcome applications from people of all backgrounds. If you need any adjustments during the recruitment process, we encourage you to let us know so we can support you.