Lead IAM Engineer

EPAM Systems, Inc.; México; Remote; MXN 1,200,000 - 1,800,000; Full time

Job summary

EPAM Systems, Inc. is seeking a Lead IAM Engineer to architect, deploy, and operate secure identity and privileged access services in a cloud environment.

You will design IAM/PAM architectures, deploy CyberArk EPV/PSMP/PSM, integrate with AD/LDAP, mentor engineers, and drive security improvements across global projects in Mexico.

This role requires strong troubleshooting, policy definition, and hands-on leadership to ensure resilient delivery.

Qualifications

• PAM experience with CyberArk EPV, PSM/PSMP deployment.
• Strong knowledge of AD/LDAP integration and access controls.
• Proven ability to lead security initiatives with ownership.
• Experience designing long-term strategies for security systems.
• Proficient in troubleshooting IAM/PAM issues and root-cause analysis.

Responsibilities

• Design IAM and PAM architectures and strategies for cloud resources.
• Architect, deploy, and operate CyberArk platforms including EPV, PSM/PSMP, EPM.
• Ensure security tech aligns with policies, standards and business goals.
• Provide operational support to maintain availability and resiliency.
• Mentor team members on security best practices and rigor.
• Troubleshoot IAM/PAM issues using tracing, logs, and diagnostics.
• Define and maintain access policies to support business direction.
• Stay aware of security trends and related issues; propose improvements.

Skills

PAM experience

CyberArk EPV

CyberArk PSM/PSMP

AD/LDAP

Scripting/Automation

Tools

HashiCorp Vault

BeyondTrust PowerBroker

CyberArk EPM

Job description

We are seeking a Lead IAM Engineer to help architect, deploy, and run secure identity and privileged access services that align with business needs in a cloud environment. You will guide security direction, improve processes, and ensure resilient delivery at scale.ResponsibilitiesDesign IAM and PAM security architectures and strategies to protect information system resources and assetsArchitect, deploy, and operate CyberArk platforms, including EPV, PSM/PSMP, and EPMEnsure security technologies integrate with information security policies, standards, and business objectivesProvide operational support for critical security infrastructure components to maintain availability and resiliencyAssess the threat landscape and adapt controls to reduce risk in a cloud computing environmentIdentify opportunities to improve security processes and implement enhancementsMentor team members and associates on security best practices and operational rigorTroubleshoot complex IAM/PAM issues using tracing, logging, and real-time diagnosticsDefine and maintain security policies and access controls to support business directionMaintain awareness of security technology trends, direction, and related issuesRequirements5+ years of Privileged Access Management (PAM) experience, including CyberArk EPV and CyberArk PSM/PSMP deployment and supportExperience leading security initiatives with minimal daily oversight and strong ownershipExperience developing long-term strategy for supported security systemsStrong CyberArk EPM design, deployment, and support experienceStrong troubleshooting skills, including tracing, logging, and real-time issue resolutionWorking knowledge of Active Directory (AD) or LDAP directory servicesAdvanced English proficiency (C1)Nice to haveExperience deploying and supporting HashiCorp VaultExperience deploying and supporting BeyondTrust PowerBrokerEndpoint privilege management experienceCoding and scripting ability to update or troubleshoot integrations and automationWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.