Cloud Security Architect + AI

EPAM Systems; Województwo mazowieckie; Hybrid; PLN 220,000 - 360,000; Full time

Benefits offered by this job

Health insurance

Multisport card

Shopping vouchers

Relocation opportunities

English classes

Stock Purchase Plan

Job summary

EPAM Systems Inc is hiring a Cloud Security Architect with AI focus to shape secure cloud architectures across hybrid and multi-cloud environments. You will drive IAM, data protection, CSPM and security governance while guiding AI-assisted automation and secure design patterns.

You will collaborate with cloud engineering, security operations and compliance teams to implement secure patterns, perform threat modeling and risk assessments, and support modernization initiatives across client

Qualifications

• Bachelor's degree in CS, cybersecurity, engineering or equivalent practical experience.
• 5+ years in information security focusing on security architecture and design.
• Experience delivering or contributing to cloud security architecture projects.
• Hands-on with at least one major cloud platform (Azure, AWS or GCP).
• Experience with CSPM and cloud security assessments.
• Familiarity with IaC, scripting and cloud automation.

Responsibilities

• Design and implement security architectures across cloud, hybrid and on-prem environments with a primary focus on cloud security.
• Gather requirements to design secure cloud solutions for new implementations, migrations and improvements.
• Define and improve CSPM capabilities including misconfiguration detection and compliance monitoring.
• Conduct security reviews, threat modeling and risk assessments for cloud infrastructure and applications.
• Develop cloud security reference architectures, standards and secure design patterns.
• Evaluate cloud security technologies (CSPM, CNAPP, cloud-native services).
• Collaborate with engineering, security, IAM and compliance teams to integrate security into cloud solutions.
• Support security automation using Terraform, PowerShell, Python or REST APIs.
• Identify AI-assisted security automation opportunities and communicate risks and remediation plans.

Skills

Cloud security

Threat modeling

IAM & access control

Scripting & IaC

AI automation familiarity

Security architecture

Communication skills

Education

Bachelor's degree in CS, Cybersecurity, Engineering

Tools

Microsoft Defender for Cloud

AWS Security Hub

Google Security Command Center

Wiz

Prisma Cloud

Terraform

CloudFormation

Bicep

Kubernetes

Python

PowerShell

Job description

Every cloud environment faces new risks as automation and AI change the security landscape. For the Cloud Security Architect + AI role, we are looking for someone to join our team who can shape secure architectures that keep pace with evolving threats. The work sits at the intersection of cloud security and AI-assisted automation, where the right decisions protect data and enable growth. You decide how security standards adapt to new technologies and business needs. The person in this role sets the direction for secure, resilient cloud solutions.

Responsibilities

• Design and implement security architectures and controls across cloud, hybrid and on-premises environments, with a primary focus on cloud security
• Gather business, technical and compliance requirements to design secure cloud solutions for new implementations, migrations and security improvements
• Define and improve cloud security capabilities, including IAM, network security, data protection, workload security, logging, monitoring and governance, and design and improve Cloud Security Posture Management (CSPM) capabilities, including misconfiguration detection, compliance monitoring, risk prioritization and remediation
• Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations
• Develop cloud security reference architectures, security standards, configuration baselines and secure design patterns
• Evaluate cloud security technologies, including CSPM, CNAPP, cloud-native security services and security automation solutions
• Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec and compliance teams to integrate security into cloud solutions
• Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies
• Use AI-assisted tools and workflows to improve cloud security activities, including cloud configuration and vulnerability analysis, security risk assessment and remediation recommendations, security policy and compliance analysis, security scripting, reporting and documentation, and repetitive task and workflow automation
• Identify opportunities for AI-assisted security automation while ensuring appropriate validation, data protection and human oversight, and communicate security risks, architectural decisions and remediation plans to stakeholders and security leadership

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, with a focus on security architecture and design
• Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects
• Strong hands-on expertise with at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls
• Strong understanding of cloud security architecture, including IAM, network segmentation, encryption, key management, workload protection, logging and monitoring
• Practical experience with Cloud Security Posture Management (CSPM), cloud security assessments, configuration reviews and risk remediation
• Experience with cloud security tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud or similar
• Working knowledge of related security domains, including IAM, network security, application security, data protection and security operations, and understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or CIS Benchmarks
• Familiarity with Infrastructure as Code, scripting and cloud security automation
• Intermediate practical experience with AI-assisted tools and automation, including some of the following: using AI tools for security analysis, troubleshooting and technical research; applying structured prompting for technical tasks; generating and validating scripts, queries and security documentation with AI; using AI to simplify repetitive security workflows; basic experience configuring AI-assisted workflows or integrations
• Understanding of safe AI usage, including data protection, access control and validation of AI-generated outputs, and willingness to further develop AI automation skills
• Strong communication and collaboration skills
• hands-on technical proficiency is a must

Nice to have

• Experience with multiple cloud platforms, hybrid or multi-cloud security architectures
• Experience with CNAPP, CWPP, CIEM, cloud governance and policy-as-code solutions
• Experience with Terraform, CloudFormation, Bicep, Python, PowerShell or similar automation technologies
• Experience with Kubernetes, container security, DevSecOps or CI/CD security
• Experience integrating cloud security solutions with SIEM/SOAR platforms
• Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Power Automate or similar tools
• Understanding of AI security risks, including prompt injection, data leakage and insecure tool usage
• Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, SC-100, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer or similar
• AI-related certifications such as AI-900, Claude Certified Architect or AWS Certified AI Practitioner are a plus

We offer

• We gather like-minded people:
• Top tech minds driving innovation in AI, cloud and digital platform modernization
• Supportive team and agile, startup-like culture
• Hybrid by design mode and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:
• Career development programs
• Thought leadership, mentoring, soft skills and well-being programs
• Certification (Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• We cover it all:
• Stable pay
• Participation in the Employee Stock Purchase Plan with a 15% discount
• Benefits package (health insurance, multisport, shopping vouchers)
• Referral bonuses up to $2,000
• Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
• Corporate, social and well-being events
• Please, note:
• Benefits listed above are available to employees only
• We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
• We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.