Job Summary

BeyondTrust Endpoint Privilege Management (EPM) Engineering Support

Role Summary

The BeyondTrust Endpoint Privilege Management (EPM) Engineering Support specialist will provide engineering and operational support for BeyondTrust EPM deployments across Supply Chain, R&D, Manufacturing, and OT environments. The resource will support policy implementation, application qualification, troubleshooting, documentation, deployment activities, and post-deployment stabilization while ensuring alignment with security and operational requirements.

Key Responsibilities

Key Responsibilities

• Develop a working understanding of Supply Chain, R&D, Manufacturing, and OT environments.
• Understand application interactions and privilege requirements across business-critical systems.
• Support application qualification and validation activities during EPM deployments.
• Work with application owners and infrastructure teams to identify and resolve application compatibility issues.
• Maintain knowledge of Windows operating systems and endpoint administration.

• Create, modify, test, and deploy BeyondTrust EPM policies for Windows endpoints.
• Support application onboarding activities within the EPM platform.
• Analyze audit logs and policy events to identify required policy adjustments.
• Troubleshoot EPM-related issues, policy failures, and application execution problems.
• Support privilege elevation and application control requirements while maintaining least-privilege principles.
• Assist with policy tuning and optimization based on business and operational feedback.

• Support the deployment of BeyondTrust EPM agents and policies across manufacturing and OT environments.
• Participate in testing, qualification, and production rollout activities.
• Monitor deployment outcomes and assist in resolving post-deployment issues.
• Support change management activities associated with EPM implementations.
• Adjust policies as required during deployment and stabilization phases.

• Develop and maintain Knowledge Articles (KAs), SOPs, runbooks, and operational documentation.
• Document policy configurations, exceptions, troubleshooting procedures, and deployment activities.
• Support creation of qualification and testing documentation.

• Prepare deployment awareness communications for impacted users and support teams.
• Coordinate with business stakeholders, application owners, and support teams during deployments.
• Provide knowledge transfer and operational support guidance to service desk and support teams.

Skill Requirements

Required Skills

• Hands-on experience with BeyondTrust Endpoint Privilege Management (EPM).
• Experience creating and modifying Windows privilege management policies.
• Strong troubleshooting and root-cause analysis skills.
• Experience analyzing EPM audit data and logs.
• Working knowledge of Windows operating systems and endpoint technologies.
• Experience supporting application qualification and deployment activities.
• Strong documentation and communication skills.

Preferred Qualifications

• Experience supporting regulated manufacturing, OT, or R&D environments.
• Knowledge of application control and least-privilege methodologies.
• Experience with endpoint security technologies.
• Basic PowerShell scripting knowledge.
• Familiarity with ITIL change, incident, and problem management processes.

Primary Deliverables

• BeyondTrust EPM policy creation and maintenance.
• Application qualification support.
• Deployment and rollout support.
• Knowledge Articles and operational documentation.
• Deployment communications and user awareness materials.
• Post-deployment troubleshooting and policy optimization.

This positions the resource as a hands-on EPM Engineer / Engineering Support Analyst supporting rollouts

Other Requirements