Senior Beyondtrust Endpoint Privilege Management (EPM) Engineer

Adecco; Manchester; On-site; GBP 62,000 - 80,000; Full time

Benefits offered by this job

Hybrid working arrangements

Competitive salary and benefits

Job summary

Adecco is seeking a Senior BeyondTrust EPM Engineer to lead administration, support, and enhancement of a large-scale BeyondTrust deployment in a highly secure, enterprise environment. You will work with packaging, endpoint engineering and security teams to ensure secure software deployment and optimal user experience.

The role requires strong expertise in BeyondTrust EPM, Windows security, and policy design, with cross‑functional collaboration across IT operations.

Qualifications

• Extensive hands‑on BeyondTrust EPM experience.
• Strong understanding of Windows endpoint security architecture.
• Proven ability to create, modify, and troubleshoot EPM policies.
• Experience supporting application packaging and software deployment processes.
• Knowledge of privilege management and application control concepts.
• Experience with large enterprise endpoints and secure environments.

Responsibilities

• Administer and maintain a large BeyondTrust EPM environment.
• Design and optimise privilege elevation and application control policies.
• Develop and maintain allowlisting and endpoint security policies.
• Collaborate with packaging teams to support software deployment.
• Analyse application behaviour to determine appropriate controls.
• Troubleshoot complex endpoint privilege issues and policy changes.

Skills

BeyondTrust EPM

Windows security

EPM policy design

Application packaging

Troubleshooting

Tools

PowerShell scripting

Microsoft Intune

MECM/SCCM

CyberArk EPM

Job description

Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer

Location: Manchester OR Inverness (5 DAYS ON-SITE)

Salary: £62,000+ Benefits

Security Clearance: Eligible for SC Clearance (SOLE BRITISH NATIONAL)

Senior BeyondTrust EPM Engineer Opportunity

We're seeking an experienced Senior BeyondTrust Endpoint Privilege Management (EPM) Engineer to join a highly secure enterprise environment supporting a large-scale and heavily customised endpoint privilege management deployment.

This is an excellent opportunity for a senior endpoint security specialist who enjoys solving complex technical challenges, working closely with application packaging teams, and shaping endpoint security controls across a critical infrastructure environment.

Candidates with strong CyberArk Endpoint Privilege Manager experience who are open to cross‑training into BeyondTrust will also be considered.

As the Senior BeyondTrust EPM Engineer, you will take ownership of the administration, support, and ongoing enhancement of a highly customised BeyondTrust implementation.

Working closely with Application Packaging, Endpoint Engineering, and Security teams, you'll ensure applications are deployed securely while maintaining a seamless user experience.

Key Responsibilities

• Administer, support, and maintain a large-scale BeyondTrust Endpoint Privilege Management environment.
• Design, implement, and optimise privilege elevation and application control policies.
• Develop and maintain application allowlisting and endpoint security policies.
• Work alongside Application Packaging teams to support software deployment and compatibility requirements.
• Analyse application behaviour and determine appropriate privilege management controls.
• Troubleshoot complex endpoint privilege and application control issues.
• Test and implement policy changes while maintaining stability and security.
• Support ongoing platform improvements and operational excellence.
• Participate in an on-call support rota.

What We're Looking For

Essential Skills & Experience

• Extensive hands‑on experience with BeyondTrust Endpoint Privilege Management (EPM).
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of:
• Windows Desktop Operating Systems
• Application Control
• Privilege Management
• Endpoint Security Best Practices
• Excellent troubleshooting and problem‑solving skills.
• Ability to work effectively within complex enterprise environments.

Desirable Skills

• CyberArk Endpoint Privilege Manager experience.
• Experience migrating between EPM platforms.
• Microsoft Intune, MECM/SCCM, or similar endpoint management technologies.
• PowerShell scripting and automation.
• Experience supporting large-scale enterprise endpoint estates.
• Knowledge of ITIL‑based service environments.
• Experience working within secure or restricted‑access environments.

What's on Offer?

• Work within a highly secure, enterprise-scale environment.
• Exposure to complex endpoint security and privilege management challenges.
• Opportunities to collaborate with security, infrastructure, and application delivery specialists.
• Ongoing training and professional development.
• Career progression within a growing cyber security function.
• Flexible and hybrid working arrangements.
• Competitive salary and benefits package.

Security Requirements

Due to the nature of the work, successful applicants must be eligible to obtain Security Check (SC) Clearance.

Applicants will typically be required to have:

• Continuous UK residency for the previous 5 years.
• The ability to pass pre‑employment screening checks.
• A suitable employment and background history.