Junior IAM Security Engineer

EPAM Systems; Argentina; On-site; ARS 900,000 - 1,500,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. The role involves onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations across Windows and macOS.

You will partner with IAM stakeholders, maintain runbooks and SOPs, and help resolve access-related tickets while growing the program and documenting best practices.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM and PRA.
• Understanding of privileged account lifecycle management and least-privilege concepts.
• Basic identity and access management knowledge with exposure to access workflows and controls.
• Experience with Windows/macOS endpoints and Active Directory concepts.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards.
• Deploy endpoint privilege management agents across Windows and macOS devices at scale.
• Support day-to-day operations of privileged remote access capabilities.
• Maintain runbooks, onboarding guides, and SOPs for PAM operations.
• Respond to and triage operational tickets related to privileged access and endpoint privilege.
• Coordinate rollout sequencing and status updates with IAM stakeholders and program partners.
• Validate least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

PAM platforms

Privileged access lifecycle

Identity & access mgmt basics

Windows/macOS endpoints

Active Directory concepts

English (B2)

Tools

BeyondTrust Password Safe

EPM

PRA

Job description

We are looking for a Junior IAM Security Engineer to help run and expand a privileged access program by onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations. You will partner with IAM stakeholders, keep clear operational documentation, and help resolve access-related tickets.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards
• Deploy endpoint privilege management agents across Windows and macOS devices at scale
• Support day-to-day operations of privileged remote access capabilities
• Maintain runbooks, onboarding guides, and standard operating procedures for PAM operations
• Respond to and triage operational tickets related to privileged access and endpoint privilege
• Coordinate rollout sequencing and status updates with IAM stakeholders and program partners
• Validate least-privilege configurations and account lifecycle controls across onboarded assets

Requirements

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with up to 1 year of experience
• Strong understanding of privileged account lifecycle management and least-privilege concepts
• Basic identity and access management knowledge with exposure to access workflows and controls
• Experience with Windows and macOS endpoint environments
• Experience with Active Directory administration concepts
• Strong written communication skills for producing operational documentation
• English proficiency: B2 Upper-Intermediate

Nice to have

• Atlassian Jira
• Atlassian Confluence
• SOX (Sarbanes‑Oxley Act)
• PCI DSS
• PowerShell

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn