Senior IT Security Engineer

Salary: 5500-7200 EUR/month gross (before tax), based on your skills and experience. The range is flexible for the right candidate.

Location: Priority 1 - Vilnius, Lithuania (hybrid), Priority 2 - Lithuania/Poland (remote/hybrid).

Schedule: 1 FTE (40 hours/week) 

12-month contract with a high possibility of extension.

We are Baltic Assist, an outsourcing company specialising in innovative remote career solutions. We provide exciting opportunities on a global level, fostering long-term cooperation between top talent and our partners. By cultivating a desirable environment, our people are empowered to excel and engage with a community of diverse professionals. With a commitment to efficiency and innovation, Baltic Assist aims to be the go-to choice for seeking rewarding careers.

Our client is one of the largest financial institutions in the Nordic region, supporting tens of thousands of end users across a complex enterprise environment. We are looking for an experienced IT Security Engineer to join the team and contribute to the design, implementation, integration, and ongoing development of enterprise endpoint security and privilege management solutions.

How you'll spend your day 

• →Participate in EPAM solution evaluation, proof of concepts, and related activities.
• →Support the design, implementation, and deployment of the selected EPAM solution.
• →Ensure alignment with enterprise architecture and security requirements.
• →Stay at the forefront of technological development to ensure solution quality and efficiency.
• →Participate in security consultancy activities and cyber assessments.
• →Build and maintain technical documentation and engineering knowledge repositories.
• →Configure and maintain endpoint privilege management policies and controls.
• →Support integration of the EPAM platform with relevant enterprise technologies and security solutions.
• →Collaborate with architects and related functions to design and deliver the solution.
• →Build strong relationships with teams and stakeholders to enable effective technical dialogue.
• →Support endpoint onboarding, migration, testing, and production rollout.
• →Develop automation using scripting and APIs.
• →Provide L3 support, troubleshooting, and platform optimization.
• →Create operational documentation and knowledge-sharing materials.
• →Act as the EPAM subject matter expert and support risk, compliance, and governance requirements.

• More than 5 years of experience in endpoint security, endpoint management, access management, or security engineering.
• Hands-on experience with at least one EPAM solution, such as CyberArk EPM, BeyondTrust EPM, Delinea, Saviynt, or similar.
• Strong knowledge of Windows administration and endpoint security.
• Experience integrating security platforms using APIs and automation.
• Strong understanding of PAM, least privilege, RBAC, and Zero Trust principles.
• Excellent troubleshooting, communication, and documentation skills.
• Team-oriented professional with experience working across distributed teams.
• Fluent in English, both written and spoken.
• Experience with the software development lifecycle and application development.
• Experienced user of Jira and Confluence.

• Experience in financial services or other highly regulated environments.
• Experience with Privileged Access Management, Secrets Management, Access Management, and Authentication solutions.
• Experience participating in the design and implementation of enterprise EPAM solutions.
• Experience delivering large-scale security transformations in complex enterprise environments.
• Knowledge of NIST, CIS Controls, ISO 27001, PCI DSS, or similar security frameworks.

What we offer 

• Flexible working arrangements and a hybrid work model to help you succeed in your career while balancing personal needs.
• An inspiring environment in a large IT organisation. 
• Work in an international team which concentrates on innovative business-facing solutions.
• An extensive training program to ensure that your skills are maintained and updated on an ongoing basis.
• Open and friendly company culture, great colleagues, company events & teambuildings.

At Baltic Assist, we believe that the strength of our team lies in the diversity of our backgrounds and perspectives. We are fully committed to promoting equal opportunities at every stage of our recruitment and selection processes. Recruitment at Baltic Assist is based solely on individual merit, qualifications, and professional competence. Our shortlisting, interviewing, and selection practices are conducted without discrimination on the grounds of gender identity or expression, sexual orientation, marital or civil partnership status, race, nationality, ethnic origin, religion or beliefs, age, veteran status, disability, medical condition, pregnancy or parental status, trade union membership, or any other protected characteristics.

By applying to this position, candidates acknowledge that information provided during the application process, as well as relevant information available through communication channels used during the recruitment process (e.g., LinkedIn, email, or other professional platforms), may be collected, stored, and processed by Baltic Assist for recruitment and selection purposes.

Please note that, as part of our recruitment and selection processes, Baltic Assist may collect and process information necessary to verify a candidate’s identity, qualifications, professional background, and the accuracy of information provided during the recruitment process.

Baltic Assist is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). All information collected during the recruitment process will be handled securely and used for recruitment and selection purposes. Your data will not be shared with unauthorized parties and will be retained only as long as necessary for the recruitment process or as required by applicable laws. Further information about how Baltic Assist processes personal data can be found in our privacy policy and GDPR guidelines.