Senior IAM & PBAC Analyst - Policy-Driven Access Architect

EPAM Systems, Inc.; Mexico; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling opportunities

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems, Inc. is seeking a Senior Business Analyst specializing in Identity & Access Management (IAM) and PBAC to translate business needs into scalable security solutions.

You will work with stakeholders, security architects, and engineering teams to define PBAC use cases and access-control models. You will document requirements, policies, flows, and audits, support UAT, and ensure regulatory alignment across workforce and customer-facing applications.

Qualifications

• 3+ years of experience as a Business Analyst in IAM/security.
• Strong PBAC/ABAC experience with access-control policy design.
• Experience gathering requirements for PBAC/IAM implementations.
• Proficient in documenting requirements and processes.
• Excellent stakeholder management and communication (English B2+).

Responsibilities

• Gather, analyze, and document business and functional IAM requirements.
• Collaborate with security, engineering, and compliance teams to define PBAC use cases.
• Translate requirements into policy definitions and decision flows.
• Document policy lifecycle, exceptions, and audit needs.
• Support UAT, test scenarios, and traceability reporting.

Skills

PBAC

ABAC

IAM concepts

Documentation

Stakeholder management

SSO

Federation

MFA

Tools

Confluence

Jira

Visio

Lucidchart

Job description

EPAM Systems, Inc. is seeking a Senior Business Analyst specializing in Identity & Access Management (IAM) and PBAC to translate business needs into scalable security solutions.

You will work with stakeholders, security architects, and engineering teams to define PBAC use cases and access-control models. You will document requirements, policies, flows, and audits, support UAT, and ensure regulatory alignment across workforce and customer-facing applications.