Remote-Ready Network Security Architect for Banking

EPAM Systems; Poland; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Hybrid by design

Remote within Poland

Relocation opportunities

English classes

Stock Purchase Plan

Job summary

EPAM Systems is seeking a Network Security Architect in Poland to lead secure architecture for large-scale digital banking initiatives. You will design, implement and govern security solutions across APIs, microservices and data flows, aligning with PSD2, PCI DSS and other regulatory requirements.

Collaboration with architecture, engineering and risk teams is essential to ensure secure-by-design delivery. You will drive As-Is/Target architecture assessments, guide secure patterns, and mentor

Qualifications

• 7+ years in network or security architecture roles, preferably in finance or large-scale transformation.
• Experience producing As-Is/Target architectures, HLDs and LLDs.
• Knowledge of OAuth2, OIDC, SAML2, mTLS/PKI, encryption and tokenization.

Responsibilities

• Define and deliver security architecture assessments and design documents.
• Design secure patterns for REST APIs, microservices and data flows.
• Assess designs, identify gaps, evaluate risk and propose mitigations.
• Collaborate with stakeholders to ensure PSD2, SWIFT CSP, PCI DSS compliance.
• Support engineering teams during implementation and resolve security challenges.
• Embed secure-by-design principles across architecture and delivery.

Skills

Security design

OAuth2/OIDC/SAML2

Threat modeling

Regulatory compliance

Security architecture

Communication

Education

TOGAF

SABSA

Tools

HSM

SIEM

Kubernetes

OpenShift

WAF

Job description

EPAM Systems is seeking a Network Security Architect in Poland to lead secure architecture for large-scale digital banking initiatives. You will design, implement and govern security solutions across APIs, microservices and data flows, aligning with PSD2, PCI DSS and other regulatory requirements.

Collaboration with architecture, engineering and risk teams is essential to ensure secure-by-design delivery. You will drive As-Is/Target architecture assessments, guide secure patterns, and mentor