Lead the deployment and configuration of BeyondTrust Endpoint Privilege Management (EPM) across the organization
Design, implement, and fine‑tune EPM policies, rules, and configurations for different user groups and environments
Work with Security / IAM / IT to plan and execute a phased rollout with early adopters, business teams, and then engineering
Collaborate with internal stakeholders to gather feedback on the rollout and adjust policies and settings accordingly
Create and maintain documentation which includes configuration guides, runbooks, deployment procedures, and best practices
Contribute to testing and validation of EPM policies to minimise user disruption while maintaining strong security controls
Identify opportunities to automate deployment, configuration, and ongoing management (e.g. via scripting in PowerShell, Bash, Python, etc.)
Monitor progress against agreed project timelines and milestones, escalating risks or blockers when needed
Work closely with the wider Identity & Access Management team to align EPM configuration with existing IAM standards and processes
Provide knowledge sharing and basic enablement to internal teams on how to work effectively with the new EPM solution

Minimum of 1 years experience deploying, configuring, and managing policies with BeyondTrust Endpoint Privilege Management (EPM) in a production environment
Good understanding of identity and access management concepts, particularly for human identities and endpoint controls
Proven ability to design, implement, and tune security policies for different user groups (IT, business users, engineers) while balancing usability and security
Practical experience working with IT, security, or IAM teams in a corporate environment
Scripting and/or automation skills in at least one language (e.g. PowerShell, Bash, Python or similar), used to support deployment, configuration, or ongoing management
Ability to create and maintain clear technical documentation (configuration, runbooks, guidelines, best practices)
Strong English communication skills, both spoken and written
Proactive, ownership‑driven working style, able to drive tasks independently once goals and direction are set.

Work fully remotely from Poland with a B2B contract, with only occasional in‑person meetings if needed.
Hands‑on work with BeyondTrust EPM, with the freedom to influence how it’s implemented, configured, and operated.
Impact from day one where you’ll own a high‑visibility security project, rolling out a new Endpoint Privilege Management platform that directly improves the organisation’s security posture.
Work in a small, focused squad with direct access to decision‑makers, minimising bureaucracy and helping you move quickly.

Security Engineer

Key skills