Senior Security Engineer (CyberArk)

We are looking for an IT Infrastructure Security Engineer with a strong focus on Privileged Access Management and Endpoint Protection to reinforce identity governance and least-privilege security controls. Responsibilities Administer and maintain CyberArk EPM to secure privileged endpoints and enforce access policies Maintain operational security runbooks and handle BAU engineering tasks Participate in security project delivery and integration Provide backup for MS Defender for Endpoint and platform health monitoring / KPI reporting (Data Platform Security / BI dashboards) Requirements 3+ years of security engineering experience with a focus on identity, access, and endpoint security Hands-on experience administering Privileged Access Management (PAM) or Endpoint Privilege Management in CyberArk EPM Knowledge of Active Directory / Azure AD / Entra ID user and access management Strong ITIL foundation (incident and change management) English proficiency at an Upper-Intermediate level (B2) or higher Czech Republic Opportunity to work in a fast-paced, agile, software engineering culture Comfortable modern office in Prague 7, with support of hybrid or fully remote mode Benefit program (5 weeks of vacation, paid sick days, paid days off for special occasions, meal vouchers, flexi pass, Prague city public transport annual coupon, multisport cards, optional contribution to pension fund, health insurance for family member) EPAM Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements) English language courses Czech language courses upon request Referral bonuses for recommended candidates Mobile Phone Tariff’s program for managerial-level candidates Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more