Senior AI Security Engineer - Data & AI Platform

EPAM Systems; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Multisport

Shopping vouchers

Employee stock purchase plan

Referral bonuses

Job summary

EPAM Systems, Inc. seeks a Senior AI Security Engineer to secure Enterprise and Scientific AI workloads across Azure and GCP. You will translate control descriptions into defensible platform configurations and implement security as code via Terraform, GitOps pipelines, and policy-as-code.

You will build hardened API layers, RBAC/ABAC controls, and LLM guardrails while ensuring governance compliance and robust observability. This role offers hybrid work within Poland.

Qualifications

• 5+ years of experience in SDLC foundations and cloud platform engineering with an AI/ML focus.
• Hands-on experience with Azure, GCP, and Kubernetes (AKS/GKE) including GPU node pools.
• Expertise in Terraform, GitOps workflows, and policy-as-code within CI/CD pipelines (Azure DevOps/GitHub Actions).
• Knowledge of RBAC/ABAC least-privilege, managed/workload identity, and geo-aware risk-based access controls.
• Familiarity with hardened API integration layers, centralized MCP gateways, and LLM guardrails for prompt/response injection and content filtering.
• Understanding of ISO 27001, EU AI Act, and GDPR requirements.

Responsibilities

• Translate AI security control descriptions into working platform configurations and defensible implementations.
• Engineer security controls as code using Terraform, GitOps CI/CD pipelines, and policy-as-code frameworks.
• Produce machine-verifiable evidence that proves adherence to control descriptions.
• Configure RBAC/ABAC least-privilege access and risk-based controls across environments.
• Build a hardened API integration layer and centralized gateway with access controls.
• Deploy LLM guardrails for prompt/response injection, content filtering, and rate limits.
• Set up observability pipelines for anomaly and drift detection, and end-to-end traceability.
• Maintain training-data and model isolation to support robustness and prevent theft.
• Collaborate with auditors and AI engineers to ensure governance compliance.

Skills

Security mindset

Platform engineering

AI/ML focus

English proficiency

Tools

Terraform

GitOps

Azure DevOps

GitHub Actions

Kubernetes

Job description

We are seeking a Senior AI Security Engineer to join the AI Foundation team and secure Enterprise AI and Scientific AI workloads across Azure and GCP platforms. This is an implementation-focused role where you will translate AI Security Framework controls into working platform configurations, engineering security as code through Terraform, GitOps CI/CD security gates, and policy-as-code that continuously attests to compliance. You will collaborate closely with Senior AI Security auditors and AI Engineers in a high-talent-density domain, ensuring implementations consistently pass governance requirements.ResponsibilitiesTranslate AI Security control descriptions into working platform configurations and defensible implementationsEngineer security controls as code using Terraform, GitOps CI/CD pipelines, and policy-as-code frameworksProduce machine-verifiable evidence that proves adherence to control descriptionsImplement Kubernetes GPU node pool segmentation, VNet/VPC isolation, and private endpoints across Azure and GCPConfigure RBAC/ABAC least-privilege access, managed/workload identity, and risk-based access controlsBuild a hardened API integration layer and centralized gateway with tool-level access controlsDeploy LLM guardrails for prompt/response injection, content filtering, kill-switches, and inference rate limitsSet up observability pipelines for anomaly and drift detection, restricted-access logs, and end-to-end traceabilityMaintain training-data and model isolation to support robustness and prevent model theftCollaborate with Senior AI Security auditors and AI Engineers to ensure implementations pass governance consistentlySupport classification and compliance efforts aligned with ISO 27001, EU AI Act, and GDPR requirementsRequirements5+ years of experience in SDLC foundations and cloud platform engineering with an AI/ML focusSecurity-first mindset with the ability to translate control intent into defensible implementations alongside senior specialistsHands-on experience with Azure, GCP, and Kubernetes (AKS/GKE) including GPU node pools and VNet/VPC segmentationExpertise in Terraform, GitOps workflows, and policy-as-code within CI/CD pipelines (Azure DevOps/GitHub Actions)Knowledge of IAM concepts including RBAC/ABAC least-privilege, managed/workload identity, and geo-aware risk-based access controlsFamiliarity with hardened API integration layers, centralized MCP gateways, and LLM guardrails for prompt/response injection and content filteringProficiency in observability tools such as OpenTelemetry, Prometheus, Loki, Tempo, and Grafana for anomaly and drift detectionUnderstanding of data classification, training-data/model isolation, and model-theft prevention practicesBackground in compliance frameworks including ISO 27001, EU AI Act, and GDPREnglish proficiency at B2 level or higherWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.