Network Security Architect - Payments Experience

EPAM Systems, Inc.; Poland; Hybrid; PLN 230,000 - 360,000; Full time

Benefits offered by this job

Health insurance

Multisport access

Relocation support

Job summary

EPAM Systems, Inc. in Poland seeks a Network Security Architect to lead secure-by-design architecture for large-scale banking programs. You will collaborate with architecture, engineering and risk teams to ensure compliant, robust security designs across platforms.

Responsibilities include As-Is/Target security states, HLD/LLD artifacts, secure patterns for APIs and microservices, and guidance on PSD2/PCI DSS. Strong communication and 7+ years in security architecture required.

Qualifications

• 7+ years in network or security architecture roles, preferably in financial services.
• Able to produce As-Is/Target states, HLDs and LLDs for major programs.
• Expertise in OAuth2, OIDC, SAML2, mTLS, encryption and secrets management.

Responsibilities

• Lead security architecture assessments and design for large transformations.
• Define secure patterns for API/microservices integration in payments.
• Ensure PSD2, PCI DSS and local regulatory compliance; manage risk mitigations.
• Collaborate with delivery teams to embed secure-by-design practices.

Skills

Security architecture

API security

PKI & encryption

Risk assessment

Regulatory compliance

DevSecOps

Stakeholder engagement

Cloud security

Education

SABSA

TOGAF

CISSP

Tools

OpenShift

Kubernetes

WAF

SIEM

PKI tools

Job description

We’re looking for a Network Security Architect to join our team in Poland.In this role, you will lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure compliance with regulatory requirements and delivery of robust, secure-by-design architectures. This is a strategic opportunity to influence security posture across highly regulated environments while working with modern platforms and technologies.ResponsibilitiesDefine and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents and LLDs for major transformation programsDesign secure patterns for integration approaches including REST APIs, microservices, event-driven systems, and batch processing in payment environmentsAssess solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations and best practicesApply core security standards and principles (OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, network zoning and firewall configurations)Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business and Risk stakeholdersCollaborate closely with delivery teams to embed secure-by-design principles across architecture and implementationEnsure security design compliance with financial regulations such as PSD2, SWIFT CSP, PCI DSS and local requirementsSupport engineering teams during implementation and resolve security-related technical challengesRequirements7+ years of experience in network or security architecture roles, preferably within financial services or large-scale digital transformationProven ability to produce and govern security architecture artifacts including As-Is/Target states, HLDs and LLDsExpertise in security design for APIs, microservices, system integration and sensitive data flowsStrong knowledge of key security technologies and standards: OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets managementExperience addressing risk through secure design patterns and engaging with architecture, compliance and business stakeholdersHands-on familiarity with protocols, data flows, application behaviors and infrastructure-level security considerationsExcellent communication skills, capable of influencing technical and business teamsRelevant security or architecture certification (e.g., SABSA, TOGAF) is a plusNice to haveKnowledge of payment solutions and platforms (FIS, ACI, Temenos, Finastra etc.)Previous full-stack engineering experience before moving into Security ArchitectureExperience defining infrastructure security architectures for high availability and resilience (WAF, DDoS, SIEM)Familiarity with container security and hybrid cloud platforms (OpenShift, Kubernetes, service mesh)Exposure to DevSecOps practices, CI/CD security tools and secure software supply chain principlesStrong understanding of data security designs, classifications and migration strategiesWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.