PAM Engineer: CyberArk & BeyondTrust EPM

Sanderson Government and Defence; Manchester; On-site; GBP 81,000 - 100,000; Full time

Job summary

Sanderson Government and Defence seeks two experienced PAM/EPM engineers to administer a highly customised BeyondTrust EPM environment in a secure enterprise. You will design policies for privilege elevation, application control, and endpoint security while collaborating with packaging and engineering teams to ensure smooth deployments.

Applicants should bring extensive BeyondTrust EPM expertise, strong Windows security knowledge, and a proven track record in troubleshooting complex privilege

Qualifications

• Extensive hands-on experience with BeyondTrust EPM administration and engineering.
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of Windows Desktop Operating Systems, Application Control, Privilege Elevation, Endpoint Security, Software Packaging and Deployment, and Group Policy Administration.
• Ability to analyse software requirements and design effective privilege management solutions.
• Experience supporting highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis skills.
• Experience working within secure, controlled, or highly regulated environments.
• Strong documentation and technical communication skills.
• Ability to work independently in a complex operational setting.

Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.
• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.
• Analyse application requirements and define appropriate privilege management solutions.
• Troubleshoot complex endpoint privilege management and application control issues.
• Develop, test, and deploy policy changes while maintaining operational stability and security.
• Support the on-boarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.
• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.
• Produce and maintain technical documentation, support procedures, and operational standards.
• Contribute to continuous improvement initiatives and platform optimisation activities.

Skills

EPM administration

Windows endpoint security

Policy troubleshooting

Application packaging

Group Policy

Endpoint security

Documentation

Independent work

Tools

CyberArk Endpoint Privilege Manager

Job description

Sanderson Government and Defence seeks two experienced PAM/EPM engineers to administer a highly customised BeyondTrust EPM environment in a secure enterprise. You will design policies for privilege elevation, application control, and endpoint security while collaborating with packaging and engineering teams to ensure smooth deployments.

Applicants should bring extensive BeyondTrust EPM expertise, strong Windows security knowledge, and a proven track record in troubleshooting complex privilege