We are looking for a Senior Security Engineer to join our team. The Security Engineer contributes to the design, deployment, and operation of secure privileged access management solutions built around business needs. This position supports operational innovation and offers security expertise to enhance the firm's overall security stance. The role is centered on rolling out and maintaining Endpoint Privilege Manager (EPM) capabilities enterprise-wide while promoting secure and efficient privileged access practices.

Responsibilities

- Function autonomously with little need for day-to-day supervision
- Design, deploy, and sustain CyberArk Endpoint Privilege Manager (EPM) solutions
- Assist with enterprise-wide migration efforts away from PowerBroker and other outdated privilege management platforms
- Work alongside application and infrastructure teams to identify, address, and confirm privileged access needs
- Build and sustain EPM policies, application control rules, and privilege elevation setups
- Resolve EPM-related problems and offer operational support for essential business applications
- Help teams revise workflows and hard-coded privileged tasks affected by migration efforts
- Spot chances for improving security processes and optimizing privilege management
- Track developments in privileged access management technologies, industry trends, and new risks
- Partner with offshore and nearshore teams to enable smooth knowledge transfer and operational transitions

Requirements

- At least 3 years of relevant experience supporting Privileged Access Management (PAM) technologies
- Practical experience with CyberArk Endpoint Privilege Manager (EPM), covering implementation, configuration, policy management, deployment, monitoring, and ongoing support
- Experience resolving endpoint privilege elevation, application control,



and least-privilege enforcement problems
- Understanding of Windows operating systems, Active Directory, endpoint security controls, and enterprise authentication methods
- Experience evaluating application privilege needs and collaborating with technical teams to deliver secure solutions
- Strong analytical, troubleshooting, and communication skills
- Background working within enterprise settings involving multiple stakeholders and cross-functional teams
- Solid written and spoken English proficiency at a B2 level or higher

Nice to have

- Familiarity with additional CyberArk products, such as Privileged Session Manager (PSM), Vault, and Central Policy Manager (CPM)
- Understanding of session monitoring, privileged account management, and access governance principles
- Experience assisting with migrations from PowerBroker or comparable endpoint privilege management tools
- Scripting or automation capabilities using PowerShell or similar technologies
- Background working in financial services or other heavily regulated industries

We offer

- International projects with top brands
- Work with general teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Senior Security Engineer (México)
🏢 Epam Systems
📍 México