PAM Security Engineer - Privileged Access & Endpoint Management

EPAM Systems, Inc.; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

EPAM Systems, Inc. is seeking a skilled IAM Security Engineer to onboard privileged accounts and roll out endpoint privilege management across Windows and macOS.

You will support PRA operations on the PAM platform, maintain runbooks, and resolve privileged access tickets in collaboration with IAM stakeholders. Ideal candidates have hands-on experience with BeyondTrust Password Safe, EPM, PRA, and strong Active Directory knowledge.

Qualifications

• Hands-on PAM experience with BeyondTrust Password Safe, EPM, PRA or an equivalent platform.
• 2+ years in privileged access lifecycle management or similar.
• Strong understanding of least-privilege concepts and access controls.
• Practical experience with Windows and macOS endpoint environments.
• Solid knowledge of Active Directory administration and IAM workflows.

Responsibilities

• Onboard privileged and admin accounts into the PAM platform following standards.
• Roll out endpoint privilege management agents across Windows and macOS devices at scale.
• Operate day-to-day privileged remote access capabilities and ensure service continuity.
• Update runbooks, onboarding guides, and SOPs for PAM operations.
• Handle and triage operational tickets related to privileged access and endpoint privilege issues.
• Align rollout sequencing and provide status updates with IAM stakeholders and partners.

Skills

PAM experience

Least-privilege concepts

Active Directory

Endpoint management

Windows/macOS

Tools

BeyondTrust Password Safe

EPM

PRA

PowerShell

Job description

EPAM Systems, Inc. is seeking a skilled IAM Security Engineer to onboard privileged accounts and roll out endpoint privilege management across Windows and macOS.

You will support PRA operations on the PAM platform, maintain runbooks, and resolve privileged access tickets in collaboration with IAM stakeholders. Ideal candidates have hands-on experience with BeyondTrust Password Safe, EPM, PRA, and strong Active Directory knowledge.