Junior IAM Security Engineer - PAM & Privileged Access

EPAM Systems, Inc.; United States; Remote; USD 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Job summary

EPAM Systems, Inc. is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. You will onboard privileged accounts, deploy endpoint privilege controls, and support secure remote access operations across Windows and macOS environments.

You will work with IAM stakeholders to maintain runbooks, documentoperational processes, and respond to access-related tickets, ensuring least-privilege configurations and lifecycle controls across onboarded assets.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or equivalent.
• Understanding of privileged account lifecycle and least-privilege concepts.
• Experience with Windows and macOS endpoint environments.
• Active Directory administration concepts.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following defined standards.
• Deploy endpoint privilege management agents across Windows and macOS devices at scale.
• Support day-to-day operations of privileged remote access capabilities.
• Maintain runbooks, onboarding guides, and standard operating procedures for PAM operations.
• Respond to and triage operational tickets related to privileged access and endpoint privilege.
• Coordinate rollout sequencing and status updates with IAM stakeholders and program partners.
• Validate least-privilege configurations and account lifecycle controls across onboarded assets.

Skills

PAM experience

Least privilege concepts

IAM knowledge

Endpoint management

Active Directory

Documentation

English communication

Tools

BeyondTrust Password Safe

Windows/macOS endpoints

Job description

EPAM Systems, Inc. is seeking a Junior IAM Security Engineer to help run and expand a privileged access program. You will onboard privileged accounts, deploy endpoint privilege controls, and support secure remote access operations across Windows and macOS environments.

You will work with IAM stakeholders to maintain runbooks, documentoperational processes, and respond to access-related tickets, ensuring least-privilege configurations and lifecycle controls across onboarded assets.