HelloKindred
BeyondTrust Endpoint Privilege Management (EPM) Engineer (2 Open Positions)

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company Description
Who is HelloKindered?
HelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid.
Our vision is to make work accessible and people’s lives better. We do this by disrupting traditional employment barriers – connecting ambitious talent to flexible opportunities with trusted brands.
Job Description
Anticipated Contract End Date/Length: 3-5 months contract
Work Setup: Onsite (5 days per week in secure facility) Manchester and Inverness
Clearance Required: BPSS eligibility required
Our client in the Information Technology and Services industry is looking for a BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised EPM deployment within a secure enterprise environment.
The successful candidates will work closely with Application Packaging and Endpoint Engineering teams, providing expert-level support, administration, troubleshooting, and policy engineering across the BeyondTrust EPM platform. The environment contains significant customisation and requires individuals capable of understanding complex privilege management policies, application control requirements, and endpoint security configurations.
Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, provided they are willing to cross-train into BeyondTrust EPM. The role operates within secure facilities in either Inverness or Manchester and requires participation in a 24x7 operational shift rota.
What you will do:
- Administer, support, and maintain a heavily customised BeyondTrust Endpoint Privilege Management (EPM) environment.
- Collaborate with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications.
- Design, implement, and maintain EPM policies governing privilege elevation, application control, allowlisting, and endpoint security.
- Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages.
- Troubleshoot complex EPM-related issues impacting application deployment, user productivity, or endpoint security controls.
- Develop, test, and implement policy changes while maintaining security and operational stability.
- Support the onboarding of new applications into the EPM estate and remediate privilege-related application issues.
- Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint control policies.
- Coordinate with packaging teams, infrastructure teams, and security stakeholders to ensure application compatibility within EPM-controlled environments.
- Maintain technical documentation, operating procedures, support guides, and policy standards.
- Participate in out-of-hours support and 24x7 shift coverage as required.
- Support continuous improvement initiatives and optimise the BeyondTrust EPM platform.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Qualifications
- Bring extensive hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM).
- Possess a strong understanding of Windows endpoint security architecture.
- Demonstrate experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
- Bring proven experience supporting application packaging and software deployment processes.
- Possess strong knowledge of Windows Desktop Operating Systems, application control, privilege elevation, endpoint security, software packaging and deployment, and Group Policy Administration.
- Demonstrate the ability to analyse application requirements and define appropriate privilege management solutions.
- Bring experience supporting highly customised enterprise EPM platforms.
- Apply strong troubleshooting and root cause analysis skills to complex endpoint and privilege management issues.
- Possess experience working within secure, controlled, or highly regulated environments.
- Demonstrate excellent documentation and technical communication skills.
- Show the ability to work independently within a complex operational environment.
- Bring experience with CyberArk Endpoint Privilege Manager (EPM), preferably.
- Possess experience migrating between EPM platforms, preferably.
- Demonstrate knowledge of Microsoft Intune, MECM/SCCM, or equivalent endpoint management platforms, preferably.
- Bring PowerShell scripting and automation experience, preferably.
- Possess experience supporting large-scale enterprise endpoint environments.
- Demonstrate familiarity with ITIL-based operational environments.
- Bring experience working within secure facilities or restricted-access environments.
- Show willingness to cross-train into BeyondTrust EPM where CyberArk EPM provides the primary professional background.
- Demonstrate willingness to work from a secure facility in either Inverness or Manchester and participate in a 24x7 support rota.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Additional Information
- Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
- HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
- We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
- HelloKindered is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.
Department: Tech Staffing
Anticipated Hours per Week: 37.5
Work Setup: In-Office
Compensation: GBP 0 - GBP 390.43 - daily
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills