IAM Security Engineer — Privileged Access & PAM

EPAM Systems; México; On-site; MXN 400,000 - 700,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certification

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems is seeking an IAM Security Engineer to onboard privileged accounts, roll out privileged access management across Windows and macOS, and support PRA on the PAM platform. You will work with IAM stakeholders, maintain clear runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets.

The role emphasizes least-privilege configurations, identity and access management, and strong documentation in English (B2); you will join international teams and contribute to

Qualifications

• 2+ years of hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or equivalent.
• Strong understanding of privileged account lifecycle management and least-privilege concepts.
• Working knowledge of identity and access management with exposure to access workflows and controls.
• Practical experience with Windows and macOS endpoint environments.
• Solid understanding of Active Directory administration concepts.
• Strong written communication skills for producing operational documentation.
• English proficiency: B2 Upper-Intermediate.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following established standards.
• Roll out endpoint privilege management agents across Windows and macOS devices at scale.
• Operate day-to-day privileged remote access capabilities and ensure service continuity.
• Update runbooks, onboarding guides, and SOPs for PAM operations.
• Handle and triage operational tickets related to privileged access and endpoint privilege.
• Align rollout sequencing and provide status updates with IAM stakeholders and program partners.
• Verify least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

PAM experience

Identity & Access Management

Windows & macOS

Active Directory

Technical documentation

English (B2)

Tools

BeyondTrust Password Safe

EPM

PRA

PowerShell

Jira

Confluence

Job description

EPAM Systems is seeking an IAM Security Engineer to onboard privileged accounts, roll out privileged access management across Windows and macOS, and support PRA on the PAM platform. You will work with IAM stakeholders, maintain clear runbooks and SOPs, and help resolve privileged access and endpoint privilege tickets.

The role emphasizes least-privilege configurations, identity and access management, and strong documentation in English (B2); you will join international teams and contribute to