Senior BeyondTrust EPM Engineer - Privilege Specialist

Capgemini; Inverness; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Disability Confident Employer (Level 2

Hybrid working arrangement

Job summary

Capgemini is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Engineer to support a large-scale, highly customised deployment in secure enterprise environments across Inverness or Manchester. You will administer, troubleshoot, and policy-engineer across the EPM platform.

This senior role requires expertise in privilege management, application control, and collaboration with packaging teams, with an on-call rota and hybrid working arrangement.

Qualifications

• Extensive hands-on experience administering BeyondTrust Endpoint Privilege Management (EPM).
• Strong understanding of Windows endpoint security architecture and EPM policy management.
• Experience creating, modifying, and troubleshooting BeyondTrust EPM policies and deployment workflows.
• Desirable: CyberArk Endpoint Privilege Manager experience and cross-training into BeyondTrust EPM.

Responsibilities

• Administer, support, and maintain a heavily customised BeyondTrust EPM environment.
• Collaborate with Application Packaging and Endpoint Engineering teams for deployment success.
• Design, implement, and maintain EPM policies for privilege elevation, application control, allowlisting, and security.
• Analyse application behavior to determine privilege management needs for new/existing software.
• Troubleshoot complex EPM issues impacting deployment, productivity, or security controls.
• Develop and test policy changes while preserving security and stability.

Skills

BeyondTrust EPM administration

Windows endpoint security

EPM policy creation/editing

Application packaging support

Software deployment experience

CyberArk EPM experience

Intune / MECM / SCCM knowledge

PowerShell scripting

ITIL familiarity

Secure facilities experience

Tools

Intune

MECM/SCCM

Job description

Capgemini is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Engineer to support a large-scale, highly customised deployment in secure enterprise environments across Inverness or Manchester. You will administer, troubleshoot, and policy-engineer across the EPM platform.

This senior role requires expertise in privilege management, application control, and collaboration with packaging teams, with an on-call rota and hybrid working arrangement.