Damia Group
Endpoint Privilege Management Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Damia Group are supporting a leading global technology organisation with the appointment of an experienced BeyondTrust Endpoint Privilege Management (EPM) Engineer.
This is an exciting opportunity to join a large-scale, highly customised EPM environment operating within a secure enterprise setting.
The successful candidate will work closely with Application Packaging, Endpoint Engineering and Security teams, providing expert-level administration, troubleshooting and policy engineering across the BeyondTrust EPM platform.
Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, particularly those with a strong endpoint security background who are willing to cross-train into BeyondTrust.
Location: Inverness or Manchester
Working Pattern: On-site within secure facilities
Shift Pattern: 24x7 operational rota
The Role
You will play a key role in maintaining and developing a complex enterprise EPM environment, ensuring applications can be deployed securely while maintaining appropriate privilege and application control policies.
Key Responsibilities
- Administer, support and maintain a highly customised BeyondTrust EPM environment.
- Design, implement and maintain policies covering privilege elevation, application control and allowlisting.
- Work closely with Application Packaging and Endpoint Engineering teams to support application deployment.
- Analyse application behaviour and identify appropriate privilege management requirements.
- Troubleshoot complex EPM issues affecting application deployment, endpoint security and user productivity.
- Develop, test and implement EPM policy changes while maintaining security and operational stability.
- Support the onboarding of new applications into the EPM environment.
- Investigate and resolve incidents relating to privilege elevation, application execution and endpoint control.
- Collaborate with packaging, infrastructure and security teams to ensure application compatibility.
- Carry out root cause analysis and implement appropriate remediation.
- Maintain technical documentation, procedures, support guides and policy standards.
- Contribute to continuous improvement and optimisation of the EPM platform.
- Participate in a 24x7 operational support rota, including out-of-hours support where required.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Skills & Experience
- Strong hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM).
- Strong understanding of Windows endpoint security architecture.
- Proven experience creating, modifying and troubleshooting BeyondTrust EPM policies.
- Experience supporting application packaging and software deployment.
- Strong knowledge of:
- Windows Desktop Operating Systems
- Application Control
- Privilege Elevation
- Endpoint Security
- Software Packaging & Deployment
- Group Policy Administration
- Ability to assess application requirements and develop appropriate privilege management solutions.
- Experience working with highly customised enterprise EPM environments.
- Excellent troubleshooting and root cause analysis capabilities.
- Experience working within secure, controlled or highly regulated environments.
- Strong technical documentation and communication skills.
- Ability to work independently within a complex operational environment.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable Skills
- CyberArk Endpoint Privilege Manager experience.
- Experience migrating between EPM platforms.
- Microsoft Intune, MECM/SCCM or equivalent endpoint management experience.
- PowerShell scripting and automation.
- Experience supporting large-scale enterprise endpoint environments.
- ITIL-based operational experience.
- Previous experience working within secure facilities or restricted-access environments.
Please note: Candidates must be able to work on-site from either Inverness or Manchester and be willing to participate in a 24x7 support rota.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills