Endpoint Privilege Management (EPM) Engineer

Softeta; Kraków; Híbrido; PLN 180.000 - 240.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Training budget

Hybrid workplace

Flexible hours

Agile/SCRUM environment

Tech equipment you can choose

Descripción de la vacante

Softeta is seeking an experienced EPAM Engineer to implement, maintain, and optimize endpoint privilege access management solutions. You will collaborate with security and infrastructure teams to strengthen endpoint security and ensure seamless integration with enterprise systems.

The role focuses on evaluating EPM tools, developing policies, and providing L3 support while documenting processes and aligning with enterprise standards.

Formación

• 5+ years in endpoint security or PAM or security engineering.
• Hands-on experience with EPM solutions (CyberArk EPM, BeyondTrust, Delinea).
• Strong Windows administration and least-privilege knowledge.
• Experience with scripting, APIs, and security platform integrations.
• Familiarity with SDLC, Jira, and Confluence.
• Excellent troubleshooting, communication, and documentation.
• Fluent English (written and spoken).

Responsabilidades

• Evaluate, implement, and configure EPM solutions.
• Develop and maintain endpoint privilege policies and controls.
• Integrate EPM platforms with enterprise systems via APIs and automation.
• Support onboarding, migration, testing, and deployment.
• Provide L3 support and optimize platform performance.
• Maintain documentation and support security, risk, and compliance.

Conocimientos

Endpoint security

PAM / RBAC / least privilege

Troubleshooting & documentation

-English proficiency

Scripting / APIs / integrations

SDLC knowledge

Jira / Confluence

Herramientas

CyberArk EPM

BeyondTrust

Delinea

Descripción del empleo

Softeta is a software engineering partner for finance, energy, industrial, and other high-stakes sectors. We specialize in building and modernizing backend-heavy, integration-critical systems where speed, accuracy, and reliability are non-negotiable. With 100+ AI and custom software experts across engineering hubs in Lithuania and Poland, we embed ourselves directly into client operations — delivering custom software, automation, and AI where they drive the most value. Clients such as SEB, NordVPN, and CarVertical trust us with systems that serve millions of users globally. We strive for excellence, that's why we created Cobble - Softeta's own AI-native development workflow, built by our engineers, that standardizes how developers work with AI agents from requirement to working code.

Currently we are looking for an experienced EPAM Engineer to implement, maintain, and optimize endpoint privilege access management solutions. You will work with security and infrastructure teams to strengthen endpoint security, enforce least privilege, and ensure seamless integration with enterprise systems.

Job Description

• Evaluate, implement, and configure EPM solutions
• Develop and maintain endpoint privilege policies and security controls
• Integrate EPM platforms with enterprise systems using APIs and automation
• Support endpoint onboarding, migration, testing, and production deployment
• Provide L3 support, troubleshoot complex issues, and optimize platform performance
• Maintain technical documentation and support security, risk, and compliance activitiesCollaborate with architects and stakeholders to ensure alignment with enterprise standards

Requirements

• 5+ years of experience in endpoint security, endpoint management, PAM, or security engineering
• Hands-on experience with CyberArk EPM, BeyondTrust, Delinea, or a similar solution
• Strong knowledge of Windows administration, endpoint security, PAM, RBAC, and least privilege principles
• Experience with scripting, APIs, and security platform integrations
• Familiarity with software development lifecycle (SDLC), Jira, and Confluence
• Strong troubleshooting, communication, and documentation skills
• Fluent written and spoken English

Nice to have

• Experience in financial services or regulated environments
• Knowledge of Secrets Management, IAM, and authentication solutions
• Experience delivering enterprise-scale security implementations
• Familiarity with NIST, CIS Controls, ISO 27001, or PCI DSS

Benefits

• Diverse and technically challenging projects
• Training budget for professional and personal growth
• Flexible working hours and a hybrid workplace model
• Flexible schedule and an Agile/SCRUM environment
• Technical equipment that you can choose