Senior Security Platform Engineer - Cloud & IaC

EPAM Systems; España; Hybrid; PHP 8,715,000 - 10,893,000; Full time

Job summary

EPAM Systems is seeking a Principal Security Platform Engineer in a hybrid Malaga, Spain setting. You’ll design, build and operate security controls across cloud, network, identity, and software supply chains, while advancing automation and CI/CD security.

You will lead CSPM/CNAPP efforts, develop IaC with Terraform or Pulumi, and apply Policy as Code to enforce security and compliance. Collaboration with security, DevOps and engineering teams is essential.

Qualifications

• Bachelor’s or Master’s degree in CS/Engineering or related field, or equivalent experience
• 5+ years in security engineering or cloud-focused roles
• Hands-on experience with cloud security (AWS, Azure, GCP) and CSPM/CNAPP platforms
• Strong understanding of networking, secure systems design and infrastructure security principles
• Proficiency in Python and/or PowerShell
• Familiarity with Windows and Linux environments
• Knowledge of CI/CD security, IaC and PaC practices using Terraform or similar tools
• Strong operational mindset with monitoring, alerting and incident response

Responsibilities

• Architect, implement and operate security platforms and controls for high availability and measurable outcomes
• Enhance and integrate security solutions across AWS, Azure, and GCP environments
• Automate controls using IaC/PaC and self-service capabilities
• Implement CSPM/CNAPP solutions (e.g., Wiz) to monitor cloud risk
• Support secure software delivery pipelines, including dependency scanning and secrets management
• Develop IaC using Terraform, Pulumi or Ansible for automated provisioning
• Apply Policy as Code frameworks (e.g., OPA, Sentinel) for enforcement and automation
• Collaborate with Security Operations, DevOps and engineering teams to improve security posture
• Use AI-assisted tools to accelerate automation and security analysis

Skills

Cloud security

CSPM

CNAPP

Terraform

IaC

PaC

Python

CI/CD security

Education

Bachelor's degree in Computer Science

Tools

Terraform

Pulumi

Ansible

Wiz

Job description

EPAM Systems is seeking a Principal Security Platform Engineer in a hybrid Malaga, Spain setting. You’ll design, build and operate security controls across cloud, network, identity, and software supply chains, while advancing automation and CI/CD security.

You will lead CSPM/CNAPP efforts, develop IaC with Terraform or Pulumi, and apply Policy as Code to enforce security and compliance. Collaboration with security, DevOps and engineering teams is essential.