Senior Security Engineer

EPAM Systems; Mexico; On-site; PHP 6,270,000 - 9,404,000; Full time

Benefits offered by this job

Healthcare benefits

Employee financial programs

Job summary

EPAM Systems is seeking a Senior Security Engineer to design, deploy, and operate privileged access management solutions centered on CyberArk EPM. You will collaborate with global teams to implement secure endpoint privilege controls and support enterprise migration efforts.

The role requires hands-on experience with EPM, strong analytical skills, and excellent communication. Join a dynamic, inclusive environment and contribute to securing critical business applications across the organization.

Qualifications

• 3+ years supporting Privileged Access Management (PAM) technologies.
• Hands-on CyberArk EPM implementation, configuration, and monitoring.
• Experience with privilege elevation, app control, and least-privilege enforcement.
• Knowledge of Windows OS, Active Directory, and enterprise auth methods.
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Design, deploy, and sustain CyberArk EPM solutions enterprise-wide.
• Collaborate with infra and app teams to identify privileged access needs.
• Maintain EPM policies, app control rules, and privilege elevation setups.
• Address EPM-related issues and support key business apps.
• Assist migration away from legacy privilege management tools.
• Improve security processes and privilege management efficiency.
• Track PAM trends and emerging risks.
• Support knowledge transfer with offshore/nearshore teams.
• Function autonomously with minimal supervision.
• Participate in enterprise-wide privileged access optimization projects.

Skills

PAM experience

CyberArk EPM

Endpoint security

English proficiency

Tools

CyberArk Endpoint Privilege Manager (EPM)

PowerShell

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Senior Security Engineer to join our team. The Security Engineer contributes to the design, deployment, and operation of secure privileged access management solutions built around business needs. This position supports operational innovation and offers security expertise to enhance the firm’s overall security stance. The role is centered on rolling out and maintaining Endpoint Privilege Manager (EPM) capabilities enterprise-wide while promoting secure and efficient privileged access practices.

Responsibilities

• Function autonomously with little need for day-to-day supervision
• Design, deploy, and sustain CyberArk Endpoint Privilege Manager (EPM) solutions
• Assist with enterprise-wide migration efforts away from PowerBroker and other outdated privilege management platforms
• Work alongside application and infrastructure teams to identify, address, and confirm privileged access needs
• Build and sustain EPM policies, application control rules, and privilege elevation setups
• Resolve EPM-related problems and offer operational support for essential business applications
• Help teams revise workflows and hard-coded privileged tasks affected by migration efforts
• Spot chances for improving security processes and optimizing privilege management
• Track developments in privileged access management technologies, industry trends, and new risks
• Partner with offshore and nearshore teams to enable smooth knowledge transfer and operational transitions

Requirements

• At least 3 years of relevant experience supporting Privileged Access Management (PAM) technologies
• Practical experience with CyberArk Endpoint Privilege Manager (EPM), covering implementation, configuration, policy management, deployment, monitoring, and ongoing support
• Experience resolving endpoint privilege elevation, application control, and least-privilege enforcement problems
• Understanding of Windows operating systems, Active Directory, endpoint security controls, and enterprise authentication methods
• Experience evaluating application privilege needs and collaborating with technical teams to deliver secure solutions
• Strong analytical, troubleshooting, and communication skills
• Background working within enterprise settings involving multiple stakeholders and cross-functional teams
• Solid written and spoken English proficiency at a B2 level or higher

Nice to have

• Familiarity with additional CyberArk products, such as Privileged Session Manager (PSM), Vault, and Central Policy Manager (CPM)
• Understanding of session monitoring, privileged account management, and access governance principles
• Experience assisting with migrations from PowerBroker or comparable endpoint privilege management tools
• Scripting or automation capabilities using PowerShell or similar technologies
• Background working in financial services or other heavily regulated industries

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs