Lead IAM Engineer

We are searching for a Lead IAM Engineer to architect, implement, and maintain secure application infrastructure that supports organizational goals.

This position focuses on building scalable and resilient security frameworks, managing and troubleshooting IAM platforms, and leveraging architectural and engineering expertise to advance business initiatives. The successful candidate will have experience handling a variety of applications and data environments, as well as a background in developing and enforcing security policies.

Responsibilities

• Deliver IAM solutions independently with limited oversight
• Create and implement advanced security measures to safeguard organizational resources
• Establish and execute security architectures and plans that protect information systems
• Ensure technology integrations meet Information Security requirements and align with business needs
• Guide and support colleagues and team members in adopting security best practices
• Monitor and research advancements in security technologies, threats, and industry standards
• Develop strategic plans for the ongoing improvement and maintenance of security systems

Requirements

• At least 5 years of practical experience with Ping AIC, ACI, PingOne Protect, and PingOne Verify in identity and access management environments
• Minimum one year of experience leading and managing technical teams
• Skilled in at least one programming language such as JavaScript, Java, or Python for building and adapting security tools
• Knowledge of Active Directory (AD) or other LDAP Directory Services for managing authentication and access
• Familiarity with Intrusion Detection systems for monitoring and responding to security incidents
• Experience applying Security Policies and Group Policy Objects (GPOs) to maintain compliance
• Understanding of Operating System (OS) hardening to minimize security risks
• Proficient in Single Sign-On (SSO) and Federation technologies like SAML and OIDC for secure user authentication
• Experience implementing Multi-Factor Authentication (MFA) for enhanced security
• Knowledge of Certificates and Public Key Infrastructure (PKI) for secure identity verification
• Strong understanding of Identity Management principles for controlling user access
• Experience with Cloud Technology and device authentication to secure cloud-based assets
• Excellent English communication skills at B2 level or above for effective teamwork and reporting

Nice to have

• Familiarity with other Identity & Access Management (IAM) platforms for expanded integration capabilities
• Experience deploying and maintaining HashiCorp Vault for secure secrets management
• Background with BeyondTrust PowerBroker for managing privileged access
• Ability to perform support tasks such as tracing, logging, and real-time troubleshooting for rapid issue resolution

We offer

• Career plan and real growth opportunities
• Unlimited access to LinkedIn learning solutions
• Constant training, mentoring, online corporate courses, eLearning and more
• English classes with a certified teacher
• Support for employee's initiatives (Algorithms club, toastmasters, agile club and more)
• Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)
• Flexible work schedule and dress code
• Collaborate in a multicultural environment and share best practices from around the globe
• Hired directly by EPAM & 100% under payroll
• Law benefits (IMSS, INFONAVIT, 25% vacation bonus)
• Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)
• 13 % employee savings fund, capped to the law limit
• Grocery coupons
• 30 days December bonus
• Employee Stock Purchase Plan
• 12 vacations days
• Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)
• Monthly non-taxable amount for the electricity and internet bills

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

By applying to our role, you are agreeing that your personal data may be used as in set out in EPAM´s Privacy Notice and Policy.