We are looking for a Lead Security Engineer to join our team. The Security Engineer plays a key role in designing, deploying, and operating secure privileged access management solutions aligned with organizational needs. This position drives operational innovation and provides security expertise to strengthen the firm's overall security posture. The role concentrates on deploying and sustaining Endpoint Privilege Manager (EPM) capabilities across the enterprise while fostering secure and efficient privileged access practices.

Responsibilities

- Operate with a high degree of independence, requiring minimal daily supervision
- Design, roll out, and maintain CyberArk Endpoint Privilege Manager (EPM) solutions
- Support enterprise-wide transitions away from PowerBroker and other legacy privilege management tools
- Collaborate with application and infrastructure teams to pinpoint, address, and verify privileged access requirements
- Develop and sustain EPM policies, application control rules, and privilege elevation configurations
- Address EPM-related challenges and deliver operational support for critical business applications
- Support teams in revising workflows and hard-coded privileged tasks affected by migration initiatives
- Identify areas for enhancing security processes and refining privilege management practices
- Monitor advancements in privileged access management technologies, industry trends, and emerging threats
- Work with offshore and nearshore teams to facilitate seamless knowledge sharing and operational transitions

Requirements

- A minimum of 5 years of relevant experience supporting Privileged Access Management (PAM) technologies
- At least one year of experience leading and managing development teams
- Hands-on experience with CyberArk Endpoint Privilege Manager (EPM), including implementation, configuration, policy management, deployment, monitoring, and continued support




- Experience addressing endpoint privilege elevation, application control, and least-privilege enforcement challenges
- Knowledge of Windows operating systems, Active Directory, endpoint security controls, and enterprise authentication mechanisms
- Experience assessing application privilege requirements and partnering with technical teams to deploy secure solutions
- Strong analytical, troubleshooting, and communication capabilities
- Experience operating in enterprise environments involving multiple stakeholders and cross-functional teams
- Strong written and spoken English proficiency at a B2 level or higher

Nice to have

- Experience with additional CyberArk products, including Privileged Session Manager (PSM), Vault, and Central Policy Manager (CPM)
- Familiarity with session monitoring, privileged account management, and access governance concepts
- Experience supporting migrations from PowerBroker or similar endpoint privilege management platforms
- Scripting or automation skills using PowerShell or related tools
- Experience working within financial services or other tightly regulated sectors

We offer

- International projects with top brands
- Work with integral teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Lead Security Engineer (México)
🏢 Epam Systems
📍 México