Service Account Governance Engineer

Apply
Apply

Share

successfully icon

Successfully

The vacancy has been successfully added to favorites

location icon

Bucharest, Romania

specialization icon

Cybersecurity

lob icon

BCM Industry

date icon

17/04/2026

Req. VR-122424

Apply
Project description

Join our Development Centre in Bucharest and become a member of our open-minded, progressive and professional team. In this role you will be working for one of our world-famous clients.
The Chief Security Office (CSO) of our client comprises the Chief Information Security Office (CISO) and the Corporate Security unit. The CISO organization guarantees information security for our client.
On top of attractive salary and benefits package, Luxoft will invest into your professional training, and allow you to grow your professional career.

Responsibilities
bullet icon

Perform a comprehensive assessment of the existing service account landscape.

bullet icon

Identify critical challenges such as unmanaged accounts, excessive privileges, missing rotation, and lack of visibility.

bullet icon

Evaluate practices across on-prem, cloud, hybrid, and application environments.

bullet icon

Conduct risk assessments to prioritize remediation.

bullet icon

Own and evolve the enterprise service account governance framework.

bullet icon

Define naming conventions, ownership models, classification tiers, and approval workflows.

bullet icon

Ensure alignment with compliance standards (ISO 27001, SOC2, PCI DSS).

bullet icon

Design a future-proof service account management architecture.

bullet icon

Develop a multi-year roadmap to transition from current-state gaps to a mature model.

bullet icon

Architect integrations between IAM, PAM, CI/CD, cloud platforms, and secrets management.

bullet icon

Recommend technologies to improve automation and monitoring.

bullet icon

Enhance detection of anomalous service account behavior, lateral movement, and credential misuse.

bullet icon

Support investigations involving service accounts.

bullet icon

Implement guardrails to prevent unauthorized creation or misuse.

Skills

Must have

bullet icon

10+ years in IAM, Security Engineering, or Privileged Access Governance.

bullet icon

Expertise in service account lifecycle management, PAM platforms, IAM systems, and directory services.

bullet icon

Strong automation skills (PowerShell, Python, REST APIs).

bullet icon

Experience conducting current-state assessments and designing target-state architectures.

bullet icon

Deep understanding of least privilege, credential hygiene, machine identity security, and secrets management.

Nice to have

bullet icon

Experience with Zero Trust identity models.

bullet icon

Exposure to SOC/ATR environments.

bullet icon

Certifications such as CISSP, SC-300, SC-100, CyberArk, Azure Security, AWS Security.

Other
seniority icon

Languages

English: B2 Upper Intermediate

seniority icon

Seniority

Senior

Bucharest, Romania

Req. VR-122424

Cybersecurity

BCM Industry

17/04/2026

Req. VR-122424

Apply for Service Account Governance Engineer in Bucharest

*Indicates a required field

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.


Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.


We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.


With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.


Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.


Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.