BeyondTrust EPM Cloud Consultant for Windows Endpoints

Triwill Group; United States; Remote; USD 83,000 - 165,000; Part time

Job summary

MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide short-term consulting support for a client using BeyondTrust EPM Cloud across Windows endpoints.

The initial engagement is expected to be approximately 40 hours and will focus on troubleshooting application behavior, reviewing existing privilege-management policies, and optimizing the client’s BeyondTrust configuration.

Qualifications

• 4+ years of endpoint security, privileged access, or systems engineering experience.
• Strong hands-on experience with BeyondTrust Endpoint Privilege Management for Windows.
• Experience creating and troubleshooting EPM policies, application groups and rules, privilege elevation policies, and application control policies.
• Strong Windows troubleshooting skills and ability to analyze differences between working and non-working endpoints.

Responsibilities

• Review the BeyondTrust Cloud environment and endpoint policies.
• Troubleshoot elevation and policy behavior across Windows endpoints.
• Investigate inconsistent behavior between systems under the same EPM policy.
• Analyze BeyondTrust event data, policy results, and privilege-elevation activity.
• Review rules for installers, executables, services, scripts, and network-dependent apps.
• Identify whether EPM policies or endpoint controls affect connectivity or redirection issues.
• Support troubleshooting of dependencies (e.g., .NET Framework, SQL Server Express, installers, privileged services).
• Compare working vs non-working endpoints to isolate differences.
• Create or modify application rules and privilege policies as needed.
• Validate least-privilege controls while maintaining functionality.
• Test remediation changes on a limited set of endpoints before broader rollout.
• Review policies for unnecessary elevation or broad permissions.

Skills

Endpoint security

Troubleshooting

Documentation

Customer communication

Tools

BeyondTrust EPM

Microsoft SQL Server Express

.NET Framework

Intune

Entra ID

Job description

MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide short-term consulting support for a client using BeyondTrust EPM Cloud across Windows endpoints.

The initial engagement is expected to be approximately 40 hours and will focus on troubleshooting application behavior, reviewing existing privilege-management policies, and optimizing the client’s BeyondTrust configuration.