BeyondTrust EPM/应用集成顾问
BeyondTrust EPM / Application Integration Consultant
职位概述
MetroSys 正在寻找一位经验丰富的 BeyondTrust Endpoint Privilege Management (EPM) 顾问，为一家正在经历与 BeyondTrust EPM 和 Resideo/Honeywell Compass 软件相关应用连接问题的客户提供临时专业服务。
客户目前拥有约 110 个适用于 Windows 和 macOS 端点的 BeyondTrust EPM Desktop Cloud 许可证。BeyondTrust 已经部署并正常运行；然而，某些运行 Compass 的 Windows 工作站现在无法连接到远程警报面板，尽管它们受相同的 BeyondTrust 策略管理。
该顾问将负责进行跨平台技术评估，以确定问题是否源自 BeyondTrust EPM 策略、Windows/Microsoft 组件、SQL/.NET 依赖项、端点安全控制、网络行为或 Compass 应用程序本身。
这不是一个传统的故障修复支持岗位。顾问应能够独立处理多种技术的调查，隔离根本原因，实施或建议补救措施，并记录适当的 BeyondTrust 配置和应用管理实践。
主要职责
- 审查客户的现有 BeyondTrust EPM Desktop Cloud 配置、策略、应用规则、提升策略和端点行为。
- 在受影响和正常工作的 Windows 端点上排查 Compass 安装和运行时行为。
- 将已知正常工作的工作站与受影响系统进行对比，识别配置、策略执行、权限、服务、注册表设置、网络和应用依赖项方面的差异。
- 调查 BeyondTrust 策略或端点控制是否影响或重定向 Compass 与远程警报面板的通信。
- 审查应用依赖项，包括 Microsoft .NET Framework、SQL Server Express、Windows 服务、应用权限和本地安全设置。
- 分析 Compass 的出站通信，确定连接是否被端点或网络控制阻止、重定向、修改或其他影响。
- 审查 BeyondTrust 应用事件、审计信息、策略匹配、提升活动和其他可用日志，以识别潜在冲突。
- 在受控方式下临时测试或修改 BeyondTrust 策略，以隔离 EPM 作为潜在原因，而不会不必要的削弱安全性。
查看英文原文
Position Overview
MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide ad hoc professional services supporting a client experiencing application connectivity issues involving BeyondTrust EPM and Resideo/Honeywell Compass software.
The client currently has approximately 110 BeyondTrust EPM Desktop Cloud licenses for Windows and macOS endpoints. BeyondTrust has been implemented and was operating successfully; however, certain Windows workstations running Compass are now unable to connect to remote alarm panels despite being governed by the same BeyondTrust policies.
The consultant will be responsible for performing a cross-platform technical assessment to determine whether the issue originates from BeyondTrust EPM policies, Windows/Microsoft components, SQL/.NET dependencies, endpoint security controls, network behavior, or the Compass application itself.
This is not intended to be a traditional break/fix support role. The consultant should be capable of owning the investigation across multiple technologies, isolating the root cause, implementing or recommending remediation, and documenting appropriate BeyondTrust configuration and application-management practices.
Key Responsibilities
- Review the client's existing BeyondTrust EPM Desktop Cloud configuration, policies, application rules, elevation policies, and endpoint behavior.
- Troubleshoot Compass installation and runtime behavior across affected and functioning Windows endpoints.
- Compare a known-working workstation against affected systems to identify differences in configuration, policy enforcement, permissions, services, registry settings, networking, and application dependencies.
- Investigate whether BeyondTrust policies or endpoint controls are affecting or redirecting Compass communications with remote alarm panels.
- Review application dependencies including Microsoft .NET Framework, SQL Server Express, Windows services, application permissions, and local security settings.
- Analyze Compass outbound communications and determine whether connections are being blocked, redirected, modified, or otherwise affected by endpoint or network controls.
- Review BeyondTrust application events, audit information, policy matches, elevation activity, and other available logs to identify potential conflicts.
- Temporarily test or modify BeyondTrust policies in a controlled manner to isolate EPM as a potential cause without unnecessarily weakening endpoint security.
- Coordinate troubleshooting findings with BeyondTrust, Resideo/Honeywell, Microsoft, and the client's internal IT team as appropriate.
- Identify the root cause or provide a documented technical assessment identifying the most likely responsible component and recommended next steps.
- Implement approved BeyondTrust configuration changes or application exceptions when required.
- Document final configuration, troubleshooting findings, remediation steps, and recommended BeyondTrust EPM best practices.
- Provide additional BeyondTrust professional services using a block-of-hours model as requested by the client.
Required Qualifications
- Strong hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) Cloud for Windows.
- Experience creating, troubleshooting, and modifying BeyondTrust application control and privilege-management policies.
- Strong Windows endpoint troubleshooting experience.
- Working knowledge of Windows networking, application communications, DNS, firewall behavior, services, registry, and security controls.
- Experience troubleshooting Windows applications dependent upon .NET Framework and Microsoft SQL Server/SQL Express.
- Ability to analyze application behavior using Windows and network diagnostic tools.
- Experience troubleshooting situations involving multiple vendors where the source of the issue is initially unknown.
- Ability to independently perform discovery, testing, root-cause analysis, remediation, and technical documentation.
- Strong client-facing communication skills and ability to coordinate with third-party vendor support teams.
Preferred Qualifications
- BeyondTrust certifications or significant BeyondTrust EPM implementation experience.
- Experience with Resideo/Honeywell Compass, alarm-management software, building automation, or similar Windows-based operational applications.
- Experience with Microsoft Intune, Entra ID, Defender, Group Policy, or other endpoint-management/security platforms.
- Experience troubleshooting application traffic using tools such as Wireshark, ProcMon, Event Viewer, PowerShell, or similar diagnostic utilities.
Originally posted on Himalayas