Junior IAM Security Engineer

EPAM Systems, Inc.; United States; Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Job summary

EPAM Systems, Inc. is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. You will onboard privileged accounts, deploy endpoint privilege controls, and support secure remote access operations across Windows and macOS environments.

You will work with IAM stakeholders to maintain runbooks, documentoperational processes, and respond to access-related tickets, ensuring least-privilege configurations and lifecycle controls across onboarded assets.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or equivalent.
• Understanding of privileged account lifecycle and least-privilege concepts.
• Experience with Windows and macOS endpoint environments.
• Active Directory administration concepts.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards.
• Deploy endpoint privilege management agents across Windows and macOS devices at scale.
• Support day-to-day operations of privileged remote access capabilities.
• Maintain runbooks, onboarding guides, and standard operating procedures for PAM operations.
• Respond to and triage operational tickets related to privileged access and endpoint privilege.
• Coordinate rollout sequencing and status updates with IAM stakeholders and program partners.
• Validate least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

PAM experience

Least privilege concepts

IAM knowledge

Endpoint management

Active Directory

Documentation

English communication

Tools

BeyondTrust Password Safe

Windows/macOS endpoints

Job description

We are looking for a Junior IAM Security Engineer to help run and expand a privileged access program by onboarding privileged accounts, deploying endpoint privilege controls, and supporting secure remote access operations. You will partner with IAM stakeholders, keep clear operational documentation, and help resolve access-related tickets.ResponsibilitiesOnboard privileged and admin accounts into the PAM platform following defined standardsDeploy endpoint privilege management agents across Windows and macOS devices at scaleSupport day-to-day operations of privileged remote access capabilitiesMaintain runbooks, onboarding guides, and standard operating procedures for PAM operationsRespond to and triage operational tickets related to privileged access and endpoint privilegeCoordinate rollout sequencing and status updates with IAM stakeholders and program partnersValidate least-privilege configurations and account lifecycle controls across onboarded assetsRequirementsHands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform with up to 1 year of experienceStrong understanding of privileged account lifecycle management and least-privilege conceptsBasic identity and access management knowledge with exposure to access workflows and controlsExperience with Windows and macOS endpoint environmentsExperience with Active Directory administration conceptsStrong written communication skills for producing operational documentationEnglish proficiency: B2 Upper-IntermediateNice to haveAtlassian JiraAtlassian ConfluenceSOX (Sarbanes-Oxley Act)PCI DSSPowerShellWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn