Lead Security Engineer

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
We are looking for a Lead Security Engineer to join our team.
The Security Engineer supports the design, deployment, and operation of secure privileged access management solutions tailored to business needs.
This position drives operational innovation and delivers security guidance to strengthen the firm's overall security posture. The role centers on implementing and maintaining CyberArk Privileged Session Manager (PSM) capabilities to reinforce privileged access controls, session monitoring, and accountability throughout the enterprise.
Responsibilities
Work autonomously with limited need for daily supervision
Design, deploy, and sustain CyberArk Privileged Session Manager (PSM) solutions
Facilitate the onboarding of privileged accounts, administrators, and support teams into monitored session management workflows
Set up and sustain session monitoring, recording, and privileged access controls across enterprise systems
Partner with infrastructure and application teams to secure elevated access while limiting disruption to operations
Diagnose and resolve PSM connectivity, session management, and privileged access challenges
Guide teams in adopting secure session management approaches and operational protocols
Spot opportunities to enhance privileged access governance and monitoring practices
Support critical security infrastructure to preserve system availability and dependability
Track developments in privileged access management technologies, industry trends, and emerging security threats
Work with offshore and nearshore teams to ensure smooth knowledge sharing and operational transitions
Requirements
At least 5 years of relevant experience supporting Privileged Access Management (PAM) technologies
A minimum of one year of experience leading and managing development teams
Practical experience with CyberArk Privileged Session Manager (PSM), covering implementation, configuration, onboarding, session monitoring, troubleshooting, and ongoing support
Experience maintaining privileged account access controls, session recording, and security monitoring functions
Understanding of Windows Server, Active Directory, network protocols, endpoint administration, and enterprise authentication methods
Background collaborating with infrastructure, server, and application support teams to secure privileged access processes
Strong analytical, troubleshooting, and communication abilities
Experience operating within enterprise settings involving multiple stakeholders and cross-functional teams
Solid written and spoken English proficiency at a B2 level or higher
Nice to have
Familiarity with additional CyberArk products such as EPM, Vault, CPM, and PVWA
Understanding of privileged access governance, compliance, and access certification procedures
Experience onboarding support teams, administrators, and service accounts into CyberArk platforms
We offer
International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn
EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

Work arrangement
Yes