Junior IAM Security Engineer

EPAM Systems, Inc.; México; Remote; MXN 300,000 - 460,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off and sick leave

LinkedIn Learning access

Global career opportunities

Upskilling and certification courses

Job summary

EPAM Systems, Inc. is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. You will onboard privileged accounts, deploy endpoint privilege controls, and support secure remote access operations.

You will document operations, coordinate with IAM stakeholders, and resolve access-related tickets while working with Windows and macOS endpoints and Active Directory environments.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform.
• Knowledge of privileged account lifecycle management and least-privilege concepts.
• Exposure to access workflows and controls in identity environments.
• Experience with Windows and macOS endpoint environments.
• Strong understanding of Active Directory administration.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards.
• Deploy endpoint privilege management agents across Windows and macOS devices at scale.
• Support day-to-day operations of privileged remote access capabilities.
• Maintain runbooks, onboarding guides, and SOPs for PAM operations.
• Respond to and triage operational tickets related to privileged access and endpoint privilege.

Skills

PAM concepts

Active Directory

Windows

macOS

Least-privilege

Documentation

Tools

BeyondTrust Password Safe

EPM

PRA

Jira

Confluence

Job description

We are looking for a Junior IAM Security Engineer to help run and expand a privileged access program by onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations. You will partner with IAM stakeholders, keep clear operational documentation, and help resolve access-related tickets.ResponsibilitiesOnboard privileged and admin accounts into the PAM platform following defined standardsDeploy endpoint privilege management agents across Windows and macOS devices at scaleSupport day-to-day operations of privileged remote access capabilitiesMaintain runbooks, onboarding guides, and standard operating procedures for PAM operationsRespond to and triage operational tickets related to privileged access and endpoint privilegeCoordinate rollout sequencing and status updates with IAM stakeholders and program partnersValidate least-privilege configurations and account lifecycle controls across onboarded assetsRequirementsHands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with up to 1 year of experienceStrong understanding of privileged account lifecycle management and least-privilege conceptsBasic identity and access management knowledge with exposure to access workflows and controlsExperience with Windows and macOS endpoint environmentsExperience with Active Directory administration conceptsStrong written communication skills for producing operational documentationEnglish proficiency: B2 Upper-IntermediateNice to haveAtlassian JiraAtlassian ConfluenceSOX (Sarbanes-Oxley Act)PCI DSSPowerShellWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.