EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture.

Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential. We are looking for a Lead Security Engineer to join our team.

The Security

Engineer plays a key role in designing, deploying, and operating secure privileged access management solutions aligned with organizational needs. This position drives operational innovation and provides security expertise to strengthen the firm's overall security posture. The role concentrates on deploying and sustaining Endpoint Privilege Manager (EPM) capabilities across the enterprise while fostering secure and efficient privileged access practices.

Responsibilities Operate with a high degree of independence, requiring minimal daily supervision

Design, roll out, and maintain CyberArk Endpoint Privilege Manager (EPM) solutions

Support enterprise-wide transitions away from PowerBroker and other legacy privilege management tools

Collaborate with application and infrastructure teams to pinpoint, address, and verify privileged access requirements

Develop and sustain EPM policies, application control rules, and privilege elevation configurations





Address EPM-related challenges and deliver operational support for critical business applications

Support teams in revising workflows and hard-coded privileged tasks affected by migration initiatives

Identify areas for enhancing security processes and refining privilege management practices

Monitor advancements in privileged access management technologies, industry trends, and emerging threats

Work with offshore and nearshore teams to facilitate seamless knowledge sharing and operational transitions Requirements A minimum of 5 years of relevant experience supporting Privileged Access Management (PAM) technologies

At least one year of experience leading and managing development teams

Hands-on experience with CyberArk Endpoint Privilege Manager (EPM), including implementation, configuration, policy management, deployment, monitoring, and continued support

Experience addressing endpoint privilege elevation, application control, and least-privilege enforcement challenges

Knowledge of Windows operating systems, Active Directory, endpoint security controls, and enterprise authentication mechanisms

Experience assessing application privilege requirements and partnering with technical teams to deploy secure solutions





Strong analytical, troubleshooting, and communication capabilities

Experience operating in enterprise environments involving multiple stakeholders and cross-functional teams

Strong written and spoken English proficiency at a B2 level or higher Nice to have Experience with additional CyberArk products, including Privileged Session Manager (PSM), Vault, and Central Policy Manager (CPM)

Familiarity with session monitoring, privileged account management, and access governance concepts

Experience supporting migrations from PowerBroker or similar endpoint privilege management platforms

Scripting or automation skills using PowerShell or related tools

Experience working within financial services or other tightly regulated sectors We offer International projects with top brands

Work with integral teams of highly skilled, diverse peers

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling, reskilling and certification courses

Unlimited access to the LinkedIn Learning library and 22,000+ courses

Global career opportunities

Volunteer and community involvement opportunities

EPAM Employee Groups

Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Lead Security Engineer (México)
🏢 Epam Systems
📍 México