Junior PAM Engineer: Privileged Access & Endpoint Security

EPAM Systems; Argentina; On-site; ARS 900,000 - 1,500,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. The role involves onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations across Windows and macOS.

You will partner with IAM stakeholders, maintain runbooks and SOPs, and help resolve access-related tickets while growing the program and documenting best practices.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM and PRA.
• Understanding of privileged account lifecycle management and least-privilege concepts.
• Basic identity and access management knowledge with exposure to access workflows and controls.
• Experience with Windows/macOS endpoints and Active Directory concepts.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards.
• Deploy endpoint privilege management agents across Windows and macOS devices at scale.
• Support day-to-day operations of privileged remote access capabilities.
• Maintain runbooks, onboarding guides, and SOPs for PAM operations.
• Respond to and triage operational tickets related to privileged access and endpoint privilege.
• Coordinate rollout sequencing and status updates with IAM stakeholders and program partners.
• Validate least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

PAM platforms

Privileged access lifecycle

Identity & access mgmt basics

Windows/macOS endpoints

Active Directory concepts

English (B2)

Tools

BeyondTrust Password Safe

EPM

PRA

Job description

EPAM Systems is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. The role involves onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations across Windows and macOS.

You will partner with IAM stakeholders, maintain runbooks and SOPs, and help resolve access-related tickets while growing the program and documenting best practices.