Senior IAM Engineer (Identity and Access Management)

Remote in Mexico

Identity and Access Management

Location-specific conditions & benefits*

Mexico

We are seeking a highly skilled Senior IAM Engineer to join our team and drive the development, deployment, and maintenance of secure application infrastructures with a primary focus on Endpoint Privileged Management.

This advanced role involves designing and implementing security architecture, supporting critical business initiatives, and maintaining a strong security posture across cloud computing and enterprise environments.

Responsibilities

Architect and implement security strategies to protect information system resources and assets in alignment with business objectives
Collaborate with security leadership to assess the evolving threat landscape and quickly adapt solutions to mitigate risks
Drive integration of IAM technology into enterprise systems while adhering to Information Security policies and standards
Diagnose and troubleshoot IAM-related issues, including tracing, logging, and debugging across various platforms and applications
Identify opportunities for security process enhancements and recommend sustainable improvements
Mentor team members and associates on IAM best practices, leveraging expertise to elevate team competency
Provide operational support for Endpoint Privileged Management systems to ensure ongoing availability and resiliency
Research, design, and implement long-term strategy and policies for IAM systems, ensuring scalability and compliance
Maintain awareness of emerging security technologies and industry trends to drive innovation

Requirements

3+ years of experience with Endpoint Privileged Management technologies and solutions
Expertise deploying and supporting Single Sign-On (SSO) technologies for internal and external applications, including skills in Security Assertion Markup Language (SAML) or OpenID Connect (OIDC)
Proficiency in scripting and programming languages such as Python, Javascript, Bash, and Powershell, with flexibility to learn and utilize other technologies as needed
Competency in HTTP debugging and troubleshooting, using tools like Fiddler or SAML-Tracer
Background in Active Directory or other LDAP Directory Services, with skills to query and update through scripts

Nice to have

Familiarity with SecureAuth IdP
Understanding of Multi-Factor Authentication (MFA) technology deployment and support for diverse environments
General knowledge of Virtual Directory Services, Certificates/Public Key Infrastructure (PKI), Identity Management concepts, and cloud technologies for device authentication

We offer/Benefits

International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn