Senior BeyondTrust- EPM Engineer

About the job you’re considering

We are seeking an experienced Beyond Trust Endpoint Privilege Management (EPM) Engineer to support a large-scale, highly customised EPM deployment within a secure enterprise environment.

The successful candidate will work closely with the Application Packaging team, providing expert-level support, administration, troubleshooting, and policy engineering across the Beyond Trust EPM platform. The environment contains significant customisation and requires an individual capable of understanding complex privilege management policies, application control requirements, and endpoint security configurations.

Candidates with strong Cyber Ark Endpoint Privilege Manager experience will also be considered, provided they are willing to cross-train into Beyond Trust EPM.This role operates within secure facilities in either Inverness or Manchester and requires participation in operational ON-CALL rota.

Candidate Profile The ideal candidate will be a senior-level EPM engineer with extensive practical experience of Beyond Trust Endpoint Privilege Management in complex enterprise environments.

They will be comfortable working within a heavily customised deployment, collaborating closely with Application Packaging teams, and resolving challenging privilege management and application compatibility issues.

We will also consider experienced Cyber Ark EPM professionals who possess strong endpoint security and privilege management expertise and are willing to cross-train into Beyond Trust EPM.Candidates must be willing to work from secure facilities in either Inverness or Manchester and participate in a support rota

Your role Administer, support, and maintain a heavily customised Beyond Trust Endpoint Privilege Management (EPM) environment.

Work closely with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications.

Design, implement, and maintain EPM policies governing privilege elevation, application control, allow listing, and endpoint security.

Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages.

Troubleshoot complex EPM-related issues impacting application deployment, user productivity, or endpoint security controls.

Develop, test, and implement policy changes while maintaining security and operational stability.

You can bring your whole self to work. At Capgemini, striving for equity, diversity and inclusion is part of everyday life, and will be part of your working reality. We have built an inclusive and welcoming environment, for everyone.

Your skills and experience

Essential Skills & Experience Extensive hands-on experience administering and engineering Beyond Trust Endpoint Privilege Management (EPM).Strong understanding of Windows endpoint security architecture.

Experience creating, modifying, and troubleshooting Beyond Trust EPM policies.

Proven experience supporting application packaging and software deployment processes.

Strong experience of:o Windows Desktop Operating Systemso Application Control Desirable Skills

Experience with Cyber Ark Endpoint Privilege Manager (EPM).Experience migrating between EPM platforms.

Knowledge of Microsoft Intune, MECM/SCCM, or equivalent endpoint management platforms.

Power Shell scripting and automation experience.

Experience supporting large-scale enterprise endpoint environments.

Familiarity with ITIL-based operational environments.

Experience working within secure facilities or restricted-access environments.

We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level
2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

Declare they have a disability, andMeet the minimum essential criteria for the role.

Please opt in during the application process.

Your security clearance and pre-employment checks

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided…