Senior Endpoint Privilege Management (EPM) Engineer - Inverness

We are seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Engineer to support a large-scale, highly customised EPM deployment within a secure enterprise environment. The successful candidate will work closely with the Application Packaging team, providing expert-level support, administration, troubleshooting, and policy engineering across the BeyondTrust EPM platform. The environment contains significant customisation and requires an individual capable of understanding complex privilege management policies, application control requirements, and endpoint security configurations. Candidates with strong CyberArk Endpoint Privilege Manager experience will also be considered, provided they are willing to cross-train into BeyondTrust EPM. This role operates within secure facilities in either Inverness or Manchester and requires participation in operational ON-CALL rota.

The ideal candidate will be a senior-level EPM engineer with extensive practical experience of BeyondTrust Endpoint Privilege Management in complex enterprise environments. They will be comfortable working within a heavily customised deployment, collaborating closely with Application Packaging teams, and resolving challenging privilege management and application compatibility issues. We will also consider experienced CyberArk EPM professionals who possess strong endpoint security and privilege management expertise and are willing to cross-train into BeyondTrust EPM. Candidates must be willing to work from secure facilities in either Inverness or Manchester and participate in a support rota.

Your role

• Administer, support, and maintain a heavily customised BeyondTrust Endpoint Privilege Management (EPM) environment.
• Work closely with Application Packaging and Endpoint Engineering teams to ensure successful deployment and operation of packaged applications.
• Design, implement, and maintain EPM policies governing privilege elevation, application control, allowlisting, and endpoint security.
• Analyse application behaviour and determine appropriate privilege management requirements for new and existing software packages.
• Troubleshoot complex EPM-related issues impacting application deployment, user productivity, or endpoint security controls.
• Develop, test, and implement policy changes while maintaining security and operational stability.

Your skills and experience

Essential Skills & Experience

• Extensive hands-on experience administering and engineering BeyondTrust Endpoint Privilege Management (EPM).
• Strong understanding of Windows endpoint security architecture.
• Experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Proven experience supporting application packaging and software deployment processes.
• Strong experience of:
• Windows Desktop Operating Systems
• Application Control

Desirable Skills

• Experience with CyberArk Endpoint Privilege Manager (EPM).
• Experience migrating between EPM platforms.
• Knowledge of Microsoft Intune, MECM/SCCM, or equivalent endpoint management platforms.
• PowerShell scripting and automation experience.
• Experience supporting large-scale enterprise endpoint environments.
• Familiarity with ITIL-based operational environments.
• Experience working within secure facilities or restricted-access environments.

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance. To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality. Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process. If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service).

You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions. To help support wellbeing we have trained Mental Health Champions across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.

You will be empowered to explore, innovate, and progress. You will benefit from Capgemini's learning for life mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

When you join Capgemini, you'll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what's possible. It's why, together, we seek out opportunities that will transform the world's leading businesses, and it's how you'll gain the experiences and connections you need to shape your future.

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.