Senior/Lead Security Engineer - HIPPA

EPAM Systems; Coimbatore District; On-site; INR 1,500,000 - 3,000,000; Full time

Benefits offered by this job

Health benefits

Paid time off

Learning opportunities

Job summary

EPAM Systems, Inc. seeks a Senior/Lead Security Engineer to drive HIPAA and FedRAMP/NIST 800-53 compliance initiatives. You will translate regulatory requirements into actionable engineering work, supporting audits and cross-functional teams across security, privacy, and legal.

You will own evidence requests, map audits to controls, and build lightweight automation to scale audits across clients and jurisdictions. This role requires strong backlog management and cloud security experience.

Qualifications

• 6–15 years of IT experience with security/privacy programs.
• Experience supporting HIPAA and/or FedRAMP/NIST 800-53.
• Ability to map regulatory language to engineering backlog items.
• Experience with third-party audits and evidence collection.

Responsibilities

• Translate HIPAA gap analyses and NIST controls into Azure DevOps features with acceptance criteria.
• Maintain backlog hygiene for access, data retention, and audit logging controls.
• Write and execute test cases to validate controls operate as intended.
• Own intake and fulfillment of auditor evidence requests and mapping to controls.
• Produce compliance status reports for stakeholders and scale automation.

Skills

HIPAA compliance

NIST 800-53

GRC experience

Scripting (Python/Bash)

IAM/RBAC

Audit logging

Data protection

Third-party audits

Backlog item creation

Cloud security (AWS/Azure)

Tools

Azure DevOps

Jira

SailPoint

Snyk

Qualys

Burp

Wiz

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.We are seeking a Senior/Lead Security Engineer to drive HIPAA and FedRAMP/NIST 800-53 compliance initiatives, translating regulatory requirements into actionable engineering work while supporting third-party audits and cross-functional coordination across security, privacy, and legal teams.ResponsibilitiesTranslate HIPAA gap analyses, NIST 800-53 privacy controls, and audit findings into scoped Azure DevOps Features/Stories/Tasks with clear acceptance criteria, effort estimates, and a named ownerMaintain backlog hygiene across active compliance features, including access control, data classification, log scrubbing, audit logging, data retention & deletion, and data access restrictionsWrite and execute test cases to verify controls work as designed, such as privileged-access restrictions, time-bound SailPoint access, PII minimization, and deletion-on-request, and document pass/fail evidenceOwn the intake, tracking, and fulfillment of third-party auditor evidence requests, such as Schellman FedRAMP Significant Change ReviewsMap each audit request to the relevant NIST 800-53 control and coordinate with engineering, ISRM, Privacy, and Legal to gather artifacts and deliver on the auditor's scheduleProduce recurring compliance status reporting for stakeholdersBuild lightweight automation, such as scripts, dashboards, and evidence pipelines, to reduce manual effort in future audit cycles as the program scales to new clients and jurisdictionsPartner with ISRM, Privacy Office, Legal, SRE, and cloud platform teams to document controls inherited from AWS/Azure versus controls that must be built or owned internallyRequirements6-15 years of overall experience in ITExperience in security/privacy compliance, GRC, or compliance engineering, supporting HIPAA and/or FedRAMP/NIST 800-53 programsKnowledge of the HIPAA Security & Privacy Rules, including administrative/physical/technical safeguards, BAAs, breach notification, and minimum necessary standards, as well as NIST 800-53 control families such as AC, AU, SI, and PMDemonstrated ability to turn compliance/regulatory language into scoped, estimable engineering backlog items in Azure DevOps, Jira, or similar toolsDirect experience supporting third-party audits such as SOC 2, FedRAMP, or HITRUST, including evidence collection, control-to-evidence mapping, and meeting auditor deadlinesFamiliarity with cloud environments such as AWS GovCloud and/or Azure Government, along with controls including IAM/RBAC, encryption/KMS, audit logging, and data retention & deletionNice to haveDirect experience with FedRAMP Significant Change Requests (SCR) and assessor engagementsSkills in scripting/automation using Python or Bash to automate evidence collection, control testing, or compliance dashboardsExperience with AWS IAM/identity governance tooling such as SailPoint or equivalent, and access policy management across S3, RDS, DynamoDB, and RedshiftFamiliarity with international privacy regimes such as UK/EU GDPR, Australia Privacy Act, or Canada PIPEDA, or readiness to ramp quickly as coverage expandsRelevant certifications: CIPP/US, CIPM, HCISPP, CISA, CISSP, or an AWS/Azure security certificationExperience with security-scan remediation tracking tools such as Snyk, Wiz, Qualys, or Burp, and secrets/certificate rotation programsBackground supporting legal-tech, healthcare, or government SaaS products handling regulated dataWe offerOpportunity to work on technical challenges that may impact across geographiesVast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certificationsOpportunity to share your ideas on international platformsSponsored Tech Talks & HackathonsUnlimited access to LinkedIn learning solutionsPossibility to relocate to any EPAM office for short and long-term projectsFocused individual developmentBenefit package:Health benefitsRetirement benefitsPaid time offFlexible benefitsForums to explore beyond work passion (CSR, photography, painting, sports, etc.)