IAM Security Engineer

EPAM Systems, Inc.; Colombia; Remote; COP 66,960,000 - 111,600,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certifications

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems, Inc. is seeking an IAM Security Engineer to onboard privileged accounts, roll out PRA and EPM, and support PAM operations across global projects.

You will collaborate with IAM stakeholders, maintain runbooks, and help resolve privileged access and endpoint privilege tickets. Responsibilities include onboarding accounts, scaling endpoint privilege management, updating SOPs, triaging tickets, and ensuring least-privilege configurations across assets.

Qualifications

• 2+ years of hands-on PAM experience with Password Safe, EPM, PRA or equivalent.
• Strong understanding of privileged account lifecycle management and least-privilege concepts.
• Experience with IAM identity and access workflows and controls.
• Practical experience with Windows and macOS endpoint environments.
• Solid understanding of Active Directory administration.
• Excellent written communication for operational documentation.
• English proficiency: B2 Upper-Intermediate.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform per standards.
• Roll out endpoint privilege management agents across Windows and macOS devices at scale.
• Operate day-to-day privileged remote access capabilities and ensure service continuity.
• Update runbooks, onboarding guides, and standard operating procedures for PAM operations.
• Handle and triage operational tickets related to privileged access and endpoint privilege.
• Align rollout sequencing and provide status updates with IAM stakeholders and program partners.
• Verify least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

Privileged Access Management

Least-Privilege concepts

IAM workflows

Windows endpoint administration

macOS endpoint administration

Active Directory administration

Runbooks and SOPs

Tools

BeyondTrust Password Safe

EPM

PRA

Job description

We are looking for an IAM Security Engineer to onboard privileged accounts, roll out EPM, and support PRA operations on the PAM platform. You will work with IAM stakeholders, maintain clear runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets.ResponsibilitiesOnboard privileged and admin accounts into the PAM platform in line with established standardsRoll out endpoint privilege management agents across Windows and macOS devices at scaleOperate day-to-day privileged remote access capabilities and ensure service continuityUpdate runbooks, onboarding guides, and standard operating procedures for PAM operationsHandle and triage operational tickets related to privileged access and endpoint privilegeAlign rollout sequencing and provide status updates with IAM stakeholders and program partnersVerify least-privilege configurations and account lifecycle controls across onboarded assetsRequirementsHands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with 2+ years of experienceStrong understanding of privileged account lifecycle management and least-privilege conceptsWorking knowledge of identity and access management with exposure to access workflows and controlsPractical experience with Windows and macOS endpoint environmentsSolid understanding of Active Directory administration conceptsStrong written communication skills for producing operational documentationEnglish proficiency: B2 Upper-IntermediateNice to haveAtlassian JiraAtlassian ConfluenceSOX (Sarbanes-Oxley Act)PCI DSSPowerShellWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.