We are seeking an experienced EPM Engineer to deploy, configure, and support Endpoint Privileged Management solutions across Unix/Linux, Windows, and database environments. The role focuses on enforcing least-privilege principles, implementing RBAC models, building automation for onboarding and policy management, and supporting global users through migrations and operational activities.
What You'll Do
• Architect, configure, and implement Endpoint Privileged Management (EPM) solutions across Unix/Linux, Windows, and Mac systems.
• Gather requirements, support solution design, configure policies, perform agent rollouts, testing, and production deployments.
• Define and tune privilege elevation rules, application controls, and exception workflows based on least-privilege standards.
• Collaborate with infrastructure, security, application, and IAM teams to validate use cases and translate them into EPM policies.
• Troubleshoot policy conflicts, application issues, and agent deployment challenges across environments.
• Implement and support role-based access (RBAC) models and migrate users from local-admin to controlled privilege elevation models.
• Configure policy sets, approval workflows, and enforcement mechanisms using tools like BeyondTrust PMUL and PMW.
• Develop automation for onboarding/offboarding, policy deployment, exception handling, and compliance reporting.
• Provide global training, documentation, and act as an escalation point for EPM-related issues.
What You Bring
• 7+ years of experience in Endpoint Privilege Management, PAM, IAM, or endpoint security engineering.
• Hands-on experience with sudo and alternative *nix privilege controls.
• Strong experience with CyberArk EPM and/or BeyondTrust PMUL.
• Solid understanding of Windows and Unix/Linux administration related to privilege control.
• Knowledge of database platforms such as Oracle, MSSQL, and MySQL for privileged access workflows.
• Experience implementing or supporting RBAC models.
• Strong troubleshooting, communication, and stakeholder engagement skills.
Nice to Have
• Scripting experience with PowerShell, Python, or Bash.
• Understanding of NIS / NIS+.
• Experience with Active Directory Bridge or Centrify.
• Familiarity with ITSM processes and security/compliance reporting.
• Exposure to endpoint management or EDR tooling.
About Simeio and What We Do
Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.
Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.
Alongside Simeio’s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments.
Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.
Diversity & Inclusion
Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - [email protected].
Thank you
About Your Application
We carefully review every application we receive. If your skills and experience match our needs, we’ll be in touch. If you don’t hear from us within 10 days, please don’t be discouraged—we may retain your application for future opportunities. We also encourage you to check our careers page for other openings
Top Skills
What We Do
Customers of all sizes globally rely on Simeio to help secure their organizations. An innovative and industry leader, Simeio offers professional services, Identity and Access Management (IAM) managed services and Identity as a Service (IDaaS). Its full range of services is powered by an industry-first IAM Virtualization Platform delivered via Simeio's Identity SOC. Simeio's Identity SOC is the first and only solution of its kind designed specifically to operate, monitor, and defend complex multi-vendor IAM infrastructures and deliver actionable business intelligence. Simeio's client base is expanding as interest in identity and access management and IT governance, risk and compliance grows across all sectors. Headquartered in Atlanta, Georgia, Simeio has operations in India, the United Kingdom, Europe, across North America, South America and Canada. We are a cutting-edge growing company with a strong dedication to our employees and their opportunity for growth and success. Simeio offers a state-of-the-art technology office with plans for continued growth and expansion. Our company culture is crucial to those driven for success with an entrepreneurial spirit, solution oriented, and individual contributors, as well as, team players.
.jpeg)
