Senior Solution Architect - Azure Platform & Product Security

EPAM Systems; Netherlands; On-site; EUR 100,000 - 140,000; Full time

Job summary

EPAM Systems in Eindhoven, Netherlands, seeks a Senior Solution Architect to own the Azure-based Product Security platform. You will guide design across Azure, Kubernetes, APIs and identity management, aligning engineering with business goals in a hybrid work setting.

The role focuses on cloud-native architecture, platform ownership and secure, scalable solutions, driving dependencies with stakeholders and delivering robust enterprise security.

Qualifications

• 5+ years in solution or platform architecture roles.
• Strong Azure architecture expertise including network design and enterprise integration.
• Experience with Kubernetes-based platforms and containerized workloads.
• Proven ability to design APIs and integrations across enterprise systems.
• Solid understanding of IAM, PKI, secrets management and encryption.
• Ownership of reliability, availability and DR strategies.
• Strong facilitation and consultative communication skills.
• Ability to drive architectural decisions independently.

Responsibilities

• Own end-to-end architecture for an Azure-based Product Security platform, guiding evolution from build to run.
• Design Kubernetes-based components, private networking, APIs, observability and security controls.
• Guide teams on Azure, Kubernetes, integration and deployment approaches.
• Apply security expertise in identity, PKI, secrets and key management.
• Oversee resilience, DR and business continuity across dependencies.
• Translate ambiguous asks into clear specs and actionable decisions.
• Drive cross-team coordination with infrastructure, identity, security and delivery stakeholders.
• Communicate decisions with business impact and technical trade-offs.
• Support CMDB integration, platform modernization and security improvements.

Skills

Azure architecture

Kubernetes

API design

Identity & PKI

Security architecture

Platform ownership

Stakeholder comms

Job description

Overview

We're looking for a Senior Solution Architect – Azure Platform & Product Security to join our team in Eindhoven, Netherlands, in a hybrid working mode. We are seeking a hands‑on Solution Architect with strong expertise in Microsoft Azure, cloud‑native platforms and enterprise integration to own the architecture of a Product Security platform operating in a regulated manufacturing domain. The platform issues and manages digital identities, certificates, secrets and keys for factory equipment, ensuring secure integrations and privileged‑access control. The role focuses primarily on Azure platform and product architecture while applying security knowledge to build a scalable, resilient and secure solution. You will lead the evolution of the platform from active build into operational stability, reliability and ongoing enhancements, ensuring alignment across technical and business stakeholders. Security expertise is important — especially in identity, PKI, secrets management and encryption — but this is not a pure Security Architect role. The ideal candidate combines cloud‑native architecture, platform ownership and consultative communication skills to guide engineering decisions, drive dependencies and deliver a robust enterprise solution.

Responsibilities

• Own end‑to‑end architecture for an Azure‑based Product Security platform, defining design principles for evolution from build to run and enhancement phases.
• Design architecture for Kubernetes‑based components, private networking, APIs, integrations, observability, security controls and reliability patterns.
• Guide teams on Azure, Kubernetes, integration and API design, deployment approaches and operational readiness.
• Apply security expertise in identity and access, PKI/certificates, secrets and key management, privileged access and encryption fundamentals.
• Oversee resilience architecture, including availability, DR and business continuity across internal and external dependencies.
• Facilitate requirements elicitation and translate ambiguous asks into clear specs and actionable architecture decisions.
• Drive cross‑team coordination and resolve dependencies proactively with infrastructure, identity, security and delivery stakeholders.
• Communicate architecture decisions effectively: business impact and risk for leadership, technical trade‑offs for engineers.
• Support broader account initiatives such as CMDB integration, platform modernization and security architecture improvements.

Requirements

• 5+ years in solution or platform architecture, cloud engineering or enterprise application architecture roles.
• Strong Microsoft Azure architecture expertise, including network design, platform scaling, cloud‑native workloads and enterprise integration patterns.
• Practical experience with Kubernetes‑based platforms, containerized workloads and operational reliability design.
• Proven ability to design APIs and integrations across enterprise systems (e.g., identity, certificate management, ITSM, operational systems).
• Solid understanding of security architecture fundamentals including IAM, PKI, secrets and key management, privileged access and encryption patterns.
• Ownership of reliability, availability and DR strategies for complex solutions.
• Strong facilitation and consultative communication skills — able to align business and technical stakeholders.
• Ability to operate independently and drive architectural decisions without waiting for prescriptive guidance.

Nice to have

• Experience with enterprise identity and certificate management tooling (Okta, SailPoint, PKI platforms, HSMs).
• Aware of security regulations and standards (NIS2, Cyber Resilience Act, IEC62443, ISO27001).
• Familiarity with observability practices, SIEM tools and operational dashboards.
• Broader IT architecture experience (CMDB, ITSM, platform modernization, service integration).
• Exposure to AI‑enabled delivery models such as GitHub Copilot or Azure AI services.
• Experience in Operational Technology environments, manufacturing and product security platforms.