Provide short-term consulting support for a BeyondTrust EPM Cloud environment across Windows endpoints. Troubleshoot privilege policies, application elevation, endpoint differences, and Resideo Compass connectivity issues. Analyze event data, application rules, services, dependencies, and network behavior; modify policies and rules as needed; validate least-privilege controls; document findings; and provide client knowledge transfer.
Position Overview
MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide short-term consulting support for a client using BeyondTrust EPM Cloud across Windows endpoints.
The initial engagement is expected to be approximately 40 hours and will focus on troubleshooting application behavior, reviewing existing privilege-management policies, and optimizing the client’s BeyondTrust configuration. Additional consulting hours may be available based on findings and remediation needs.
The immediate priority is investigating an issue involving Resideo Compass alarm programming software. The application installs and launches successfully on multiple endpoints, but remote panel connectivity is inconsistent despite the affected machines being governed by the same EPM policies.
The ideal consultant has hands-on experience administering and troubleshooting BeyondTrust EPM in production environments and can distinguish between privilege-management issues, application dependencies, endpoint configuration, and network-related behavior.
Key Responsibilities- Review the existing BeyondTrust Endpoint Privilege Management Cloud environment and current endpoint policies.
- Troubleshoot application elevation and policy behavior across Windows endpoints.
- Investigate inconsistent application behavior between systems operating under the same EPM policy.
- Analyze BeyondTrust event data, policy results, application rules, and privilege-elevation activity.
- Review rules related to application installers, executables, services, scripts, child processes, and network-dependent applications.
- Identify whether EPM policies or endpoint controls are contributing to application connectivity or redirection issues.
- Support troubleshooting of Resideo Compass dependencies, including:
- .NET Framework
- Microsoft SQL Server Express
- Application installation and update processes
- Privileged services and processes
- Application communication behavior
- Compare working and non-working endpoint configurations to isolate differences.
- Create or modify application rules and privilege policies where required.
- Validate least-privilege controls while maintaining application functionality.
- Test remediation changes on a limited set of endpoints before broader deployment.
- Review existing EPM policies for unnecessary elevation, overly broad permissions, or configuration inconsistencies.
- Provide guidance on application control, privileged elevation, and exception-handling best practices.
- Document findings, configuration changes, and recommended next steps.
- Provide knowledge transfer to the client’s IT team at the conclusion of the engagement.
- 4+ years of endpoint security, privileged access, or systems engineering experience.
- Strong hands-on experience with BeyondTrust Endpoint Privilege Management for Windows.
- Experience creating and troubleshooting:
- EPM policies
- Application groups and rules
- Privilege elevation policies
- Application control policies
- Endpoint exception handling
- Strong Windows troubleshooting skills.
- Experience troubleshooting applications requiring elevated privileges, services, .NET Framework, or SQL Server components.
- Ability to analyze differences between working and non-working Windows endpoints.
- Understanding of least privilege and endpoint security principles.
- Strong documentation and customer-facing communication skills.
- Ability to independently lead troubleshooting sessions and drive issues through resolution.
- BeyondTrust certifications or formal BeyondTrust EPM training.
- Experience with BeyondTrust EPM Cloud deployments in small or mid-sized organizations.
- Familiarity with Microsoft Intune, Entra ID, Group Policy, or other endpoint-management technologies.
- Experience troubleshooting application networking, proxies, local firewall behavior, or endpoint security interactions.
- Familiarity with SQL Server Express and Windows application dependencies.
- Prior consulting or professional services experience.
Similar Jobs
Information Technology
Investigate connectivity issues between BeyondTrust EPM and Resideo/Honeywell Compass across Windows endpoints. Assess EPM policies, application controls, permissions, services, registry settings, dependencies, networking, security tools, and logs to isolate root cause. Compare functioning and affected workstations, perform controlled policy testing, coordinate with vendors, implement approved remediations, and document findings, configurations, and best practices.
Top Skills:
Beyondtrust Endpoint Privilege Management (Epm) Desktop CloudDnsEvent ViewerGroup PolicymacOSMicrosoft .Net FrameworkMicrosoft DefenderMicrosoft Entra IdMicrosoft IntuneMicrosoft Sql ServerPowershellProcmonResideo/Honeywell CompassSql Server ExpressWindowsWindows FirewallWindows RegistryWindows ServicesWireshark
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Leads AI transformation, governance, quality oversight, risk management, and responsible adoption across Pfizer Global Supply and QSEO. Establishes GxP-compliant AI lifecycle practices, inspection-readiness frameworks, governance forums, portfolio monitoring, inventory management, metrics, and reporting. Advises senior leaders on AI regulations, deployment risks, investment priorities, and compliance while leading cross-functional initiatives and influencing stakeholders across Quality, Digital, Operations, and R&D.
Top Skills:
Ai GovernanceAiqasAirifArtificial IntelligenceComputerized SystemsGxpImexLeanMachine LearningSix Sigma
Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Provides strategic leadership for Computer System Assurance and quality oversight of regulated GMP/GDP computer systems across global pharmaceutical sites and Digital organizations. Establishes risk-based assurance, validation, monitoring, governance, inspection readiness, and compliance practices. Leads complex investigations, audits, regulatory-inspection support, process improvements, and cross-functional initiatives involving Digital, artificial intelligence, automation, and federated solutions. Advises senior leaders, influences stakeholders without direct authority, and deputizes for the Global Process Owner.
Top Skills:
21 Cfr Part 11Artificial IntelligenceAutomationCloud ComputingComputer System AssuranceComputerized-System ValidationContinuous MonitoringEu Annex 11Federated SystemsGamp 5GdpGmpIch Q9ImexLeanSix Sigma
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
