Endpoint Privilege Management (EPM) Engineer

Location: Kraków, Lesser Poland Voivodeship, Poland

Workplace: hybrid

Description

Softeta is a software engineering partner for finance, energy, industrial, and other high-stakes sectors. We specialize in building and modernizing backend-heavy, integration-critical systems where speed, accuracy, and reliability are non-negotiable. With 100+ AI and custom software experts across engineering hubs in Lithuania and Poland, we embed ourselves directly into client operations — delivering custom software, automation, and AI where they drive the most value. Clients such as SEB, NordVPN, and CarVertical trust us with systems that serve millions of users globally. We strive for excellence, that’s why we created Cobble – Softeta’s own AI-native development workflow, built by our engineers, that standardizes how developers work with AI agents from requirement to working code.

Currently we are looking for an experienced EPAM Engineer to implement, maintain, and optimize endpoint privilege access management solutions. You will work with security and infrastructure teams to strengthen endpoint security, enforce least privilege, and ensure seamless integration with enterprise systems.

Job description

• Evaluate, implement, and configure EPM solutions.
• Develop and maintain endpoint privilege policies and security controls.
• Integrate EPM platforms with enterprise systems using APIs and automation.
• Support endpoint onboarding, migration, testing, and production deployment.
• Provide L3 support, troubleshoot complex issues, and optimize platform performance.
• Maintain technical documentation and support security, risk, and compliance activities.
• Collaborate with architects and stakeholders to ensure alignment with enterprise standards.

Requirements

• 5+ years of experience in endpoint security, endpoint management, PAM, or security engineering.
• Hands-on experience with CyberArk EPM, BeyondTrust, Delinea, or a similar solution.
• Strong knowledge of Windows administration, endpoint security, PAM, RBAC, and least privilege principles.
• Experience with scripting, APIs, and security platform integrations.
• Familiarity with software development lifecycle (SDLC), Jira, and Confluence.
• Strong troubleshooting, communication, and documentation skills.
• Fluent written and spoken English.

Nice to have

• Experience in financial services or regulated environments.
• Knowledge of Secrets Management, IAM, and authentication solutions.
• Experience delivering enterprise-scale security implementations.
• Familiarity with NIST, CIS Controls, ISO 27001, or PCI DSS.

Benefits

• Diverse and technically challenging projects.
• Training budget for professional and personal growth.
• Flexible working hours and a hybrid workplace model.
• Flexible schedule and an Agile/SCRUM environment.
• Technical equipment that you can choose.