Network Security Architect - Payments Experience

EPAM Systems; Poland; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Hybrid by design

Remote within Poland

Relocation opportunities

English classes

Stock Purchase Plan

Job summary

EPAM Systems is seeking a Network Security Architect in Poland to lead secure architecture for large-scale digital banking initiatives. You will design, implement and govern security solutions across APIs, microservices and data flows, aligning with PSD2, PCI DSS and other regulatory requirements.

Collaboration with architecture, engineering and risk teams is essential to ensure secure-by-design delivery. You will drive As-Is/Target architecture assessments, guide secure patterns, and mentor

Qualifications

• 7+ years in network or security architecture roles, preferably in finance or large-scale transformation.
• Experience producing As-Is/Target architectures, HLDs and LLDs.
• Knowledge of OAuth2, OIDC, SAML2, mTLS/PKI, encryption and tokenization.

Responsibilities

• Define and deliver security architecture assessments and design documents.
• Design secure patterns for REST APIs, microservices and data flows.
• Assess designs, identify gaps, evaluate risk and propose mitigations.
• Collaborate with stakeholders to ensure PSD2, SWIFT CSP, PCI DSS compliance.
• Support engineering teams during implementation and resolve security challenges.
• Embed secure-by-design principles across architecture and delivery.

Skills

Security design

OAuth2/OIDC/SAML2

Threat modeling

Regulatory compliance

Security architecture

Communication

Education

TOGAF

SABSA

Tools

HSM

SIEM

Kubernetes

OpenShift

WAF

Job description

We’re looking for a Network Security Architect to join our team in Poland. In this role, you will lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure compliance with regulatory requirements and delivery of robust, secure-by-design architectures. This is a strategic opportunity to influence security posture across highly regulated environments while working with modern platforms and technologies.

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents and LLDs for major transformation programs
• Design secure patterns for integration approaches including REST APIs, microservices, event-driven systems, and batch processing in payment environments
• Assess solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations and best practices
• Apply core security standards and principles (OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, network zoning and firewall configurations)
• Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business and Risk stakeholders
• Collaborate closely with delivery teams to embed secure-by-design principles across architecture and implementation
• Ensure security design compliance with financial regulations such as PSD2, SWIFT CSP, PCI DSS and local requirements
• Support engineering teams during implementation and resolve security-related technical challenges

Requirements

• 7+ years of experience in network or security architecture roles, preferably within financial services or large-scale digital transformation
• Proven ability to produce and govern security architecture artifacts including As-Is/Target states, HLDs and LLDs
• Expertise in security design for APIs, microservices, system integration and sensitive data flows
• Strong knowledge of key security technologies and standards: OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets management
• Experience addressing risk through secure design patterns and engaging with architecture, compliance and business stakeholders
• Hands-on familiarity with protocols, data flows, application behaviors and infrastructure-level security considerations
• Excellent communication skills, capable of influencing technical and business teams
• Relevant security or architecture certification (e.g., SABSA, TOGAF) is a plus

Nice to have

• Knowledge of payment solutions and platforms (FIS, ACI, Temenos, Finastra etc.)
• Previous full-stack engineering experience before moving into Security Architecture
• Experience defining infrastructure security architectures for high availability and resilience (WAF, DDoS, SIEM)
• Familiarity with container security and hybrid cloud platforms (OpenShift, Kubernetes, service mesh)
• Exposure to DevSecOps practices, CI/CD security tools and secure software supply chain principles
• Strong understanding of data security designs, classifications and migration strategies

We offer

• We gather like-minded people:
  • Top tech minds driving innovation in AI, cloud and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid by design mode and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
  • Career development programs
  • Thought leadership, mentoring, soft skills and well-being programs
  • Certification (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
• We cover it all:
  • Stable pay
  • Participation in the Employee Stock Purchase Plan with a 15% discount
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Referral bonuses up to $2,000
  • Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
  • Corporate, social and well-being events
• Please, note:
  • Benefits listed above are available to employees only
  • We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
  • We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.