BeyondTrust EPM Consultant
位置概述 MetroSys 正在寻找经验丰富的 BeyondTrust 终点特权管理 (EPM) 顾问，以为 Windows 端点使用 Beyondtrust EPM 云客户提供短期咨询支持。初步参与预计约为40小时，将重视解决应用程序行为故障，审查现有的特权管理政策和优化客户端的 BeyonderTrust 配置。根据发现和修复需求可能可获得额外的咨询时间。立即优先调查涉及 Resideo Compass 警报编程软件的问题。应用程序在多个终端点上成功安装和启动，但尽管受影响的机器受到相同的 EPM 政策的影响，远程面板连接不一致。理想顾问在生产环境中管理和解决 BeyondTrust EPM 的问题并可以区分权限管理问题，应用程序依赖性，终端配置和网络相关行为。关键责任 ·审查现有的 Beyondtrust 终端特权管理云环境以及当前的终端政策。·解决 Windows 终端点中的应用程序高度和政策行为的差异。· 调查在同一 EPM 政策下运行的系统之间不一致的应用行为。·分析 BeyondTrust 事件数据，政策结果，应用规则和特权升级活动。·审查与应用程序安装器，可执行式，服务，脚本，子进程和网络依赖的应用相关的规则。·确定 EPM 策略或终端控制是否导致应用连接或转向问题。·支持解决 Resideo Compass 依赖性问题的故障，包括：· .NET Framework · Microsoft SQL Server Express ·应用程序安裝和更新流程 ·享有特权的服务和流程 ·应用通信行为的处理 · 进行工作和非工作终端配置的比较，以分离差异。· 在需要时创建或修改应用规则和特权政策。·同时验证最小特权控制。·在更广泛部署之前对有限组终点进行测试补救变化。·审查现有 EPM 政策不必要升高，过于宽许可或配置不一致性。·提供有关应用程序控制的指导，
查看英文原文
Position Overview
MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide short-term consulting support for a client using BeyondTrust EPM Cloud across Windows endpoints.
The initial engagement is expected to be approximately 40 hours and will focus on troubleshooting application behavior, reviewing existing privilege-management policies, and optimizing the client’s BeyondTrust configuration. Additional consulting hours may be available based on findings and remediation needs.
The immediate priority is investigating an issue involving Resideo Compass alarm programming software. The application installs and launches successfully on multiple endpoints, but remote panel connectivity is inconsistent despite the affected machines being governed by the same EPM policies.
The ideal consultant has hands-on experience administering and troubleshooting BeyondTrust EPM in production environments and can distinguish between privilege-management issues, application dependencies, endpoint configuration, and network-related behavior.
Key Responsibilities
- Review the existing BeyondTrust Endpoint Privilege Management Cloud environment and current endpoint policies.
- Troubleshoot application elevation and policy behavior across Windows endpoints.
- Investigate inconsistent application behavior between systems operating under the same EPM policy.
- Analyze BeyondTrust event data, policy results, application rules, and privilege-elevation activity.
- Review rules related to application installers, executables, services, scripts, child processes, and network-dependent applications.
- Identify whether EPM policies or endpoint controls are contributing to application connectivity or redirection issues.
- Support troubleshooting of Resideo Compass dependencies, including:
- .NET Framework
- Microsoft SQL Server Express
- Application installation and update processes
- Privileged services and processes
- Application communication behavior
- Compare working and non-working endpoint configurations to isolate differences.
- Create or modify application rules and privilege policies where required.
- Validate least-privilege controls while maintaining application functionality.
- Test remediation changes on a limited set of endpoints before broader deployment.
- Review existing EPM policies for unnecessary elevation, overly broad permissions, or configuration inconsistencies.
- Provide guidance on application control, privileged elevation, and exception-handling best practices.
- Document findings, configuration changes, and recommended next steps.
- Provide knowledge transfer to the client’s IT team at the conclusion of the engagement.
Required Qualifications
- 4+ years of endpoint security, privileged access, or systems engineering experience.
- Strong hands-on experience with BeyondTrust Endpoint Privilege Management for Windows.
- Experience creating and troubleshooting:
- EPM policies
- Application groups and rules
- Privilege elevation policies
- Application control policies
- Endpoint exception handling
- Strong Windows troubleshooting skills.
- Experience troubleshooting applications requiring elevated privileges, services, .NET Framework, or SQL Server components.
- Ability to analyze differences between working and non-working Windows endpoints.
- Understanding of least privilege and endpoint security principles.
- Strong documentation and customer-facing communication skills.
- Ability to independently lead troubleshooting sessions and drive issues through resolution.
Preferred Qualifications
- BeyondTrust certifications or formal BeyondTrust EPM training.
- Experience with BeyondTrust EPM Cloud deployments in small or mid-sized organizations.
- Familiarity with Microsoft Intune, Entra ID, Group Policy, or other endpoint-management technologies.
- Experience troubleshooting application networking, proxies, local firewall behavior, or endpoint security interactions.
- Familiarity with SQL Server Express and Windows application dependencies.
- Prior consulting or professional services experience.
Originally posted on Himalayas