Investigate connectivity issues between BeyondTrust EPM and Resideo/Honeywell Compass across Windows endpoints. Assess EPM policies, application controls, permissions, services, registry settings, dependencies, networking, security tools, and logs to isolate root cause. Compare functioning and affected workstations, perform controlled policy testing, coordinate with vendors, implement approved remediations, and document findings, configurations, and best practices.
Position Overview
MetroSys is seeking an experienced BeyondTrust Endpoint Privilege Management (EPM) Consultant to provide ad hoc professional services supporting a client experiencing application connectivity issues involving BeyondTrust EPM and Resideo/Honeywell Compass software.
The client currently has approximately 110 BeyondTrust EPM Desktop Cloud licenses for Windows and macOS endpoints. BeyondTrust has been implemented and was operating successfully; however, certain Windows workstations running Compass are now unable to connect to remote alarm panels despite being governed by the same BeyondTrust policies.
The consultant will be responsible for performing a cross-platform technical assessment to determine whether the issue originates from BeyondTrust EPM policies, Windows/Microsoft components, SQL/.NET dependencies, endpoint security controls, network behavior, or the Compass application itself.
This is not intended to be a traditional break/fix support role. The consultant should be capable of owning the investigation across multiple technologies, isolating the root cause, implementing or recommending remediation, and documenting appropriate BeyondTrust configuration and application-management practices.
Key Responsibilities- Review the client's existing BeyondTrust EPM Desktop Cloud configuration, policies, application rules, elevation policies, and endpoint behavior.
- Troubleshoot Compass installation and runtime behavior across affected and functioning Windows endpoints.
- Compare a known-working workstation against affected systems to identify differences in configuration, policy enforcement, permissions, services, registry settings, networking, and application dependencies.
- Investigate whether BeyondTrust policies or endpoint controls are affecting or redirecting Compass communications with remote alarm panels.
- Review application dependencies including Microsoft .NET Framework, SQL Server Express, Windows services, application permissions, and local security settings.
- Analyze Compass outbound communications and determine whether connections are being blocked, redirected, modified, or otherwise affected by endpoint or network controls.
- Review BeyondTrust application events, audit information, policy matches, elevation activity, and other available logs to identify potential conflicts.
- Temporarily test or modify BeyondTrust policies in a controlled manner to isolate EPM as a potential cause without unnecessarily weakening endpoint security.
- Coordinate troubleshooting findings with BeyondTrust, Resideo/Honeywell, Microsoft, and the client's internal IT team as appropriate.
- Identify the root cause or provide a documented technical assessment identifying the most likely responsible component and recommended next steps.
- Implement approved BeyondTrust configuration changes or application exceptions when required.
- Document final configuration, troubleshooting findings, remediation steps, and recommended BeyondTrust EPM best practices.
- Provide additional BeyondTrust professional services using a block-of-hours model as requested by the client.
- Strong hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) Cloud for Windows.
- Experience creating, troubleshooting, and modifying BeyondTrust application control and privilege-management policies.
- Strong Windows endpoint troubleshooting experience.
- Working knowledge of Windows networking, application communications, DNS, firewall behavior, services, registry, and security controls.
- Experience troubleshooting Windows applications dependent upon .NET Framework and Microsoft SQL Server/SQL Express.
- Ability to analyze application behavior using Windows and network diagnostic tools.
- Experience troubleshooting situations involving multiple vendors where the source of the issue is initially unknown.
- Ability to independently perform discovery, testing, root-cause analysis, remediation, and technical documentation.
- Strong client-facing communication skills and ability to coordinate with third-party vendor support teams.
- BeyondTrust certifications or significant BeyondTrust EPM implementation experience.
- Experience with Resideo/Honeywell Compass, alarm-management software, building automation, or similar Windows-based operational applications.
- Experience with Microsoft Intune, Entra ID, Defender, Group Policy, or other endpoint-management/security platforms.
- Experience troubleshooting application traffic using tools such as Wireshark, ProcMon, Event Viewer, PowerShell, or similar diagnostic utilities.
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handles inbound calls and warm leads to understand customers’ insurance needs, recommend appropriate coverages, and convert prospects into policyholders. The role includes paid training and Property & Casualty licensing, customer communication, sales closing, and brand representation. Employees work remotely, follow assigned evening and weekend schedules, maintain required home-office and internet standards, and remain in their resident state for at least one year.
Top Skills:
Cable InternetDsl InternetFiber InternetPc
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Manages complex commercial energy claims from initial report through resolution, including coverage analysis, liability assessment, reserves, litigation, settlements, and high-dollar exposures. Coordinates defense counsel, experts, legal, underwriting, reinsurance, and claims teams. Advises leadership on coverage and legal developments, mentors claims examiners, oversees litigation strategy, and supports claims process improvement while maintaining regulatory and confidentiality standards.
.png)
eCommerce • Fintech • Hardware • Payments • Software • Financial Services
Design, build, scale, and operate high-volume payment APIs and distributed systems serving global traffic. Lead complex engineering projects from requirements through production, improve reliability, performance, observability, fault tolerance, and security, and participate in on-call and incident response. Collaborate across product and engineering teams, use AI-assisted development tools responsibly, and mentor engineers through technical reviews and documentation.
Top Skills:
AWSGoKafkaKotlinTypescript
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
