Senior Security & Compliance Engineer - HIPAA/FedRAMP

EPAM Systems; Mexico; On-site; PHP 5,016,000 - 7,524,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling and certification courses

Global career opportunities

Volunteer opportunities

Job summary

EPAM Systems is a global provider of digital platform engineering and development services, seeking a security/privacy compliance professional. You will translate regulatory requirements into engineering work items, track backlog hygiene, and support third-party audits across AWS/Azure environments.

The role involves creating test cases for access control, data retention, and audit logging, and delivering compliance status reports to stakeholders.

Qualifications

• 3+ years of security/privacy compliance experience (HIPAA/FedRAMP/NIST 800-53).
• Strong knowledge of HIPAA Security & Privacy Rules and NIST 800-53 controls.
• Experience translating regulatory language into engineering backlog items in Azure DevOps or Jira.
• Direct experience supporting third-party audits (SOC 2, FedRAMP, HITRUST).
• Familiarity with AWS/Azure security controls and IAM/RBAC, encryption, and audit logging.

Responsibilities

• Translate regulatory and audit requirements into actionable engineering work items with clear acceptance criteria and owners.
• Track delivery progress and maintain backlog hygiene across compliance features and audit controls.
• Write and execute test cases to verify access controls, PII minimization, and deletion-on-request.
• Own end-to-end audit support including intake, tracking, and evidence requests.
• Produce recurring compliance status reports and lightweight automation for evidence pipelines.

Skills

HIPAA/NIST knowledge

Azure DevOps

Jira

Audit support

Regulatory translation

Cloud security

Tools

Azure DevOps

Jira

Job description

EPAM Systems is a global provider of digital platform engineering and development services, seeking a security/privacy compliance professional. You will translate regulatory requirements into engineering work items, track backlog hygiene, and support third-party audits across AWS/Azure environments.

The role involves creating test cases for access control, data retention, and audit logging, and delivering compliance status reports to stakeholders.