PAM & BeyondTrust EPM Engineer – Onsite Manchester

Sanderson Government & Defence; Manchester; On-site; GBP 81,000 - 100,000; Full time

Job summary

Sanderson Government & Defence is seeking two PAM/EMP Engineers (CyberArk) to support a large, highly customised endpoint privilege management environment. The role is based onsite in Manchester, with 5 days on-site work and a 3-month contract.

You will work with security, packaging, and engineering teams to maintain, optimise and enhance the EPM estate, with opportunities to cross-train into BeyondTrust EPM.

Qualifications

• Extensive hands-on BeyondTrust EPM administration and engineering experience.
• Strong Windows endpoint security architecture knowledge.
• Experience creating, modifying and troubleshooting EPM policies.
• Experience supporting application packaging and software deployment.
• Knowledge of group policy, endpoint security, and deployment tools.

Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage privilege elevation, application control, and endpoint security policies.
• Collaborate with packaging and engineering teams for deployment and compatibility.
• Analyse requirements and define privilege management solutions.
• Troubleshoot complex EPM issues and maintain operational stability.
• Develop and deploy policy changes; onboard new applications to EPM.
• Investigate incidents related to privilege elevation and endpoint controls.
• Produce technical documentation, support procedures, and standards.
• Contribute to platform optimisation and continuous improvement initiatives.

Skills

BeyondTrust EPM administration

Windows endpoint security

Policy design & management

Application packaging & deployment

Troubleshooting & RCA

Documentation & comms

Independent working

Tools

BeyondTrust EPM

CyberArk Endpoint Privilege Manager

PowerShell

Job description

Sanderson Government & Defence is seeking two PAM/EMP Engineers (CyberArk) to support a large, highly customised endpoint privilege management environment. The role is based onsite in Manchester, with 5 days on-site work and a 3-month contract.

You will work with security, packaging, and engineering teams to maintain, optimise and enhance the EPM estate, with opportunities to cross-train into BeyondTrust EPM.