[Hiring] Lead Security Engineer @EPAM

Role Description

We are looking for a Lead Security Engineer to join our team. The Security Engineer supports the design, deployment, and operation of secure privileged access management solutions tailored to business needs. This position drives operational innovation and delivers security guidance to strengthen the firm's overall security posture. The role centers on implementing and maintaining CyberArk Privileged Session Manager (PSM) capabilities to reinforce privileged access controls, session monitoring, and accountability throughout the enterprise.

• Work autonomously with limited need for daily supervision
• Design, deploy, and sustain CyberArk Privileged Session Manager (PSM) solutions
• Facilitate the onboarding of privileged accounts, administrators, and support teams into monitored session management workflows
• Set up and sustain session monitoring, recording, and privileged access controls across enterprise systems
• Partner with infrastructure and application teams to secure elevated access while limiting disruption to operations
• Diagnose and resolve PSM connectivity, session management, and privileged access challenges
• Guide teams in adopting secure session management approaches and operational protocols
• Spot opportunities to enhance privileged access governance and monitoring practices
• Support critical security infrastructure to preserve system availability and dependability
• Track developments in privileged access management technologies, industry trends, and emerging security threats
• Work with offshore and nearshore teams to ensure smooth knowledge sharing and operational transitions

Qualifications

• At least 5 years of relevant experience supporting Privileged Access Management (PAM) technologies
• A minimum of one year of experience leading and managing development teams
• Practical experience with CyberArk Privileged Session Manager (PSM), covering implementation, configuration, onboarding, session monitoring, troubleshooting, and ongoing support
• Experience maintaining privileged account access controls, session recording, and security monitoring functions
• Understanding of Windows Server, Active Directory, network protocols, endpoint administration, and enterprise authentication methods
• Background collaborating with infrastructure, server, and application support teams to secure privileged access processes
• Strong analytical, troubleshooting, and communication abilities
• Experience operating within enterprise settings involving multiple stakeholders and cross-functional teams
• Solid written and spoken English proficiency at a B2 level or higher

Requirements

• Familiarity with additional CyberArk products such as EPM, Vault, CPM, and PVWA
• Understanding of privileged access governance, compliance, and access certification procedures
• Experience onboarding support teams, administrators, and service accounts into CyberArk platforms