We are looking for a Lead Security Engineer to join our team. The Security Engineer supports the design, deployment, and operation of secure privileged access management solutions tailored to business needs. This position drives operational innovation and delivers security guidance to strengthen the firm's overall security posture. The role centers on implementing and maintaining CyberArk Privileged Session Manager (PSM) capabilities to reinforce privileged access controls, session monitoring, and accountability throughout the enterprise.

Responsibilities

- Work autonomously with limited need for daily supervision
- Design, deploy, and sustain CyberArk Privileged Session Manager (PSM) solutions
- Facilitate the onboarding of privileged accounts, administrators, and support teams into monitored session management workflows
- Set up and sustain session monitoring, recording, and privileged access controls across enterprise systems
- Partner with infrastructure and application teams to secure elevated access while limiting disruption to operations
- Diagnose and resolve PSM connectivity, session management, and privileged access challenges
- Guide teams in adopting secure session management approaches and operational protocols
- Spot opportunities to enhance privileged access governance and monitoring practices
- Support critical security infrastructure to preserve system availability and dependability
- Track developments in privileged access management technologies, industry trends, and emerging security threats
- Work with offshore and nearshore teams to ensure smooth knowledge sharing and operational transitions

Requirements

- At least 5 years of relevant experience supporting Privileged Access Management (PAM) technologies
- A minimum of one year of experience leading and managing development teams




- Practical experience with CyberArk Privileged Session Manager (PSM), covering implementation, configuration, onboarding, session monitoring, troubleshooting, and ongoing support
- Experience maintaining privileged account access controls, session recording, and security monitoring functions
- Understanding of Windows Server, Active Directory, network protocols, endpoint administration, and enterprise authentication methods
- Background collaborating with infrastructure, server, and application support teams to secure privileged access processes
- Strong analytical, troubleshooting, and communication abilities
- Experience operating within enterprise settings involving multiple stakeholders and cross-functional teams
- Solid written and spoken English proficiency at a B2 level or higher

Nice to have

- Familiarity with additional CyberArk products such as EPM, Vault, CPM, and PVWA
- Understanding of privileged access governance, compliance, and access certification procedures
- Experience onboarding support teams, administrators, and service accounts into CyberArk platforms

We offer

- International projects with top brands
- Work with general teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Lead Security Engineer (México)
🏢 Epam Systems
📍 México