BeyondTrust EPM Consultant
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 1d ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 73d ago
The date the source published, not the day we noticed it (2026-08-21). Last seen at its source 7h ago.
We have tracked this listing since 18 Oct 2026 (15 days). The employer's own board has carried it every time we have read it, most recently 7 hours ago.
Is it remote?
Remote
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
Not stated
The description states no restriction of its own. This is the source's own tag.
Pay
$80–120/hr
Taken from the listing's structured data, as the employer published it. Shown in the posting's own currency and period; we never convert.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
JazzHR employer's own board first seen 15d ago · last seen 7h ago
The listing
Position Overview
MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide short-term consulting support for a client using BeyondTrust EPM Cloud across Windows endpoints.
The initial engagement is expected to be approximately 40 hours and will focus on troubleshooting application behavior, reviewing existing privilege-management policies, and optimizing the client’s BeyondTrust configuration. Additional consulting hours may be available based on findings and remediation needs.
The immediate priority is investigating an issue involving Resideo Compass alarm programming software. The application installs and launches successfully on multiple endpoints, but remote panel connectivity is inconsistent despite the affected machines being governed by the same EPM policies.
The ideal consultant has hands-on experience administering and troubleshooting BeyondTrust EPM in production environments and can distinguish between privilege-management issues, application dependencies, endpoint configuration, and network-related behavior.
Key Responsibilities
- Review the existing BeyondTrust Endpoint Privilege Management Cloud environment and current endpoint policies.
- Troubleshoot application elevation and policy behavior across Windows endpoints.
- Investigate inconsistent application behavior between systems operating under the same EPM policy.
- Analyze BeyondTrust event data, policy results, application rules, and privilege-elevation activity.
- Review rules related to application installers, executables, services, scripts, child processes, and network-dependent applications.
- Identify whether EPM policies or endpoint controls are contributing to application connectivity or redirection issues.
- Support troubleshooting of Resideo Compass dependencies, including:
- .NET Framework
- Microsoft SQL Server Express
- Application installation and update processes
- Privileged services and processes
- Application communication behavior
- Compare working and non-working endpoint configurations to isolate differences.
- Create or modify application rules and privilege policies where required.
- Validate least-privilege controls while maintaining application functionality.
- Test remediation changes on a limited set of endpoints before broader deployment.
- Review existing EPM policies for unnecessary elevation, overly broad permissions, or configuration inconsistencies.
- Provide guidance on application control, privileged elevation, and exception-handling best practices.
- Document findings, configuration changes, and recommended next steps.
- Provide knowledge transfer to the client’s IT team at the conclusion of the engagement.
Required Qualifications
- 4+ years of endpoint security, privileged access, or systems engineering experience.
- Strong hands-on experience with BeyondTrust Endpoint Privilege Management for Windows.
- Experience creating and troubleshooting:
- EPM policies
- Application groups and rules
- Privilege elevation policies
- Application control policies
- Endpoint exception handling
- Strong Windows troubleshooting skills.
- Experience troubleshooting applications requiring elevated privileges, services, .NET Framework, or SQL Server components.
- Ability to analyze differences between working and non-working Windows endpoints.
- Understanding of least privilege and endpoint security principles.
- Strong documentation and customer-facing communication skills.
- Ability to independently lead troubleshooting sessions and drive issues through resolution.
Preferred Qualifications
- BeyondTrust certifications or formal BeyondTrust EPM training.
- Experience with BeyondTrust EPM Cloud deployments in small or mid-sized organizations.
- Familiarity with Microsoft Intune, Entra ID, Group Policy, or other endpoint-management technologies.
- Experience troubleshooting application networking, proxies, local firewall behavior, or endpoint security interactions.
- Familiarity with SQL Server Express and Windows application dependencies.
- Prior consulting or professional services experience.