Payments Network Security Architect - Secure-by-Design

EPAM; Poland; On-site; PLN 260,000 - 380,000; Full time

Job summary

EPAM in Poland is seeking a Network Security Architect to lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure regulatory compliance and delivery of robust, secure‑by‑design architectures.

The role involves defining security architecture artifacts, designing API/microservice security patterns, and applying standards like OAuth2,

Qualifications

• 7+ years in network or security architecture roles, preferably in financial services or large-scale digital transformation.
• Proven ability to produce and govern security architecture artifacts (As-Is/Target, HLDs, LLDs).
• Expertise in security design for APIs, microservices, system integration and sensitive data flows.
• Experience addressing risk through secure design patterns and engaging with architecture, compliance and business stakeholders.
• Hands-on familiarity with protocols, data flows, software security best practices and infrastructure‑level security considerations.

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments, High‑Level Security Design Documents and LLDs for major transformation programs.
• Design secure patterns for integration approaches including REST APIs, microservices, event‑driven systems, and batch processing in payment environments
• Assess solution designs from other architects, identify security gaps, evaluate risk, and recommend mitigations and best practices
• Apply core security standards and principles (OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets management, network zoning and firewall configurations)
• Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business and Risk stakeholders
• Collaborate closely with delivery teams to embed secure‑by‑design principles across architecture and implementation
• Ensure security design compliance with financial regulations such as PSD2, SWIFT CSP, PCI DSS and local requirements
• Support engineering teams during implementation and resolve security‑related technical challenges

Skills

Security architecture

Risk management

Stakeholder management

Security standards

Communication

Education

Security/Architecture certification (SABSA, TOGAF)

Tools

OpenShift

Kubernetes

WAF/IDS/IPS

SIEM

CI/CD security tools

Job description

EPAM in Poland is seeking a Network Security Architect to lead the design and implementation of secure, resilient network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure regulatory compliance and delivery of robust, secure‑by‑design architectures.

The role involves defining security architecture artifacts, designing API/microservice security patterns, and applying standards like OAuth2,