Network Security Architect

EPAM; Poland; On-site; PLN 106,157 - 169,851; Full time

Job summary

EPAM is looking for a seasoned security architect in Poland to produce and guide security architecture assessments, effectively deliver security designs across various technologies, and assess solution designs in major banking programs.

The ideal candidate will have over 7 years of experience in network security management and an advanced proficiency in English (B2+/C1). You will work closely with teams to ensure compliance with financial regulations and influence secure design principles.

Qualifications

• 7‑9+ years' experience in network security management.
• Expertise in security standards including OAUTH2, OIDC and SAML2.
• Advanced proficiency in English (B2+/C1).

Responsibilities

• Produce As-Is Security Architecture assessments and Target Security Architectures.
• Deliver security design across REST APIs and Microservices.
• Assess solution designs and identify security gaps.
• Manage security design decisions and negotiate with stakeholders.
• Influence secure-by-design principles through communication.

Skills

Network security management

Security architecture in banking

OAUTH2, OIDC, SAML2

MTLS/PKI

HSMs and firewall rules

Financial regulatory frameworks

DevSecOps practices

Job description

Responsibilities

• Produce and guide teams producing As-Is Security Architecture assessments, Target Security Architectures and High-Level Security Design Documents and LLDs for major banking change programs
• Deliver security design across REST APIs, Microservices, eventing, batch, integration gateways and secure data flows within highly regulated payments environments
• Assess solution designs created by Payments Architects, identify security gaps, evaluate risk and recommend secure design patterns
• Track and manage security design decisions, articulate risk-based options and negotiate with Technology, Business and Risk stakeholders
• Dig into technical details such as protocols, data flows, infra, APIs, application behaviours and implementation constraints
• Influence teams and stakeholders on secure-by-design principles through clear verbal and written communication
• Secure cloud, container and hybrid platforms including OpenShift, Kubernetes and service mesh

Requirements

• 7‑9+ years' experience in network security management
• Background in large banking transformation programs in a Security Architecture role
• Expertise in core security standards and mechanisms including OAUTH2, OIDC and SAML2
• Proficiency in MTLS/PKI, encryption and tokenization
• Skills in HSMs, secrets management, network zoning and firewall rules
• Understanding of financial regulatory frameworks such as PSD2/RTS SCA, SWIFT CSP and PCI DSS
• Knowledge of EBA guidelines, local regulators and Irish and European financial regulations
• SABSA preferred, TOGAF or equivalent acceptable
• Advanced proficiency in English (B2+/C1)
• Nice to have: Background in security oversight or design experience on payment engines/platforms such as FIS, ACI and Temenos
• Full‑stack or application engineering background prior to moving into Security Architecture
• Expertise in defining Infrastructure Security Architectures for high availability, resilience and operational risk controls including WAF, DDoS and SIEM
• Skills in designing secure data architectures, data classifications and key entity protection
• Exposure to DevSecOps practices, CI/CD security tooling and software supply chain protections