IAM Security Engineer

EPAM Systems; Colombia; On-site; COP 70,000,000 - 110,000,000; Full time

Benefits offered by this job

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling, reskilling and certif ica

Job summary

EPAM Systems in Colombia is seeking an IAM Security Engineer to onboard privileged accounts and rollout privileged access management agents across Windows and macOS, supporting PRA operations on the PAM platform.

You will work with IAM stakeholders, maintain runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets. Strong written communication and English at B2 level are required.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform.
• Strong understanding of privileged account lifecycle management and least-privilege concepts.
• Working knowledge of identity and access management with exposure to access workflows and controls.
• Practical experience with Windows and macOS endpoint environments.
• Solid understanding of Active Directory administration concepts.
• Strong written communication skills for producing operational documentation.
• English proficiency: B2 Upper-Intermediate

Responsibilities

• Onboard privileged and admin accounts into the PAM platform in line with established standards
• Roll out endpoint privilege management agents across Windows and macOS devices at scale
• Operate day-to-day privileged remote access capabilities and ensure service continuity
• Update runbooks, onboarding guides, and standard operating procedures for PAM operations
• Handle and triage operational tickets related to privileged access and endpoint privilege
• Align rollout sequencing and provide status updates with IAM stakeholders and program partners
• Verify least-privilege configurations and account lifecycle controls across onboarded assets

Skills

PAM

Active Directory

Windows

macOS

Least-privilege

Documentation

English B2

Tools

PowerShell

Jira

Confluence

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting‑edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential. We are looking for an IAM Security Engineer to onboard privileged accounts, roll out EPM, and support PRA operations on the PAM platform. You will work with IAM stakeholders, maintain clear runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform in line with established standards
• Roll out endpoint privilege management agents across Windows and macOS devices at scale
• Operate day-to-day privileged remote access capabilities and ensure service continuity
• Update runbooks, onboarding guides, and standard operating procedures for PAM operations
• Handle and triage operational tickets related to privileged access and endpoint privilege
• Align rollout sequencing and provide status updates with IAM stakeholders and program partners
• Verify least-privilege configurations and account lifecycle controls across onboarded assets

Requirements

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with 2+ years of experience
• Strong understanding of privileged account lifecycle management and least-privilege concepts
• Working knowledge of identity and access management with exposure to access workflows and controls
• Practical experience with Windows and macOS endpoint environments
• Solid understanding of Active Directory administration concepts
• Strong written communication skills for producing operational documentation
• English proficiency: B2 Upper-Intermediate

Nice to have

• Atlassian Jira
• Atlassian Confluence
• SOX (Sarbanes‑Oxley Act)
• PCI DSS
• PowerShell

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.