Security Software Architect

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Security Software Architect to cover the security requirements for the Database as a Service platform, which comprises multiple capabilities, and for the underlying storage capabilities in the on-premises "private cloud". Embedded in those platform teams, you will represent and liaise with CSO capability SMEs from across CSO pillars to capture their requirements and drive delivery of CSO's principles for private cloud security.

Responsibilities

• Represent and liaise with CSO capability SMEs from across CSO pillars to capture their requirements and drive delivery of CSO's principles for private cloud security
• Produce and agree security designs and operating models for these platforms, along with a delivery plan for Q2-4 in Q1
• Provide guidance on the delivery of the designs and operating models in Q2
• Support CSO Enterprise Security Architecture in the development of a high-level, reference security architecture for private cloud
• Ensure inclusion of on-premise service accounts management and privileged access management across all private cloud platforms within designs and operating models
• Support the Messaging as a Service (MaaS) platform team depending on demand and prioritization by the CSO
• Deliver data encryption in support of CSO's goal of encrypting data at rest in the on-premise infrastructure

Requirements

• 7+ years of experience in security architecture across all security domains
• Background in data encryption, in support of encrypting data at rest in on-premise infrastructure
• Expertise in Identity & Authentication
• Familiarity with managed Kubernetes, virtualization platforms (SDDC) and cloud and on-prem networking
• Flexibility to use Terraform, Ansible and other automation tools
• Advanced proficiency in English (B2+/C1)

We offer

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization