Senior Network Security Architect - Banking & Payments

EPAM Systems; Poland; On-site; PLN 180,000 - 300,000; Full time

Job summary

EPAM Systems in Poland is seeking a Network Security Architect to lead the design and implementation of secure network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure regulatory compliance and robust, secure-by-design architectures.

Key responsibilities include defining As-Is/To-Be security architectures, designing secure patterns for APIs and microservices, and guiding security design

Qualifications

• 7+ years in network or security architecture, preferably in financial services.
• Governs security architecture artifacts (As-Is/To-Be, HLDs and LLDs).
• Expertise in API, microservices, data flows security design.
• Proficient in OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets management.
• Addresses risk via secure design patterns with stakeholders.
• Hands-on with protocols, data flows, and infra security considerations.
• Excellent communication and influencing skills with technical/business teams.
• Security or architecture certs such as SABSA or TOGAF are a plus.
• Knowledge of payment platforms (FIS, ACI, Temenos, Finastra) is a plus.
• Prior full-stack engineering experience before security architecture.
• Experience defining infra security architectures for high availability (WAF, DDoS, SIEM).
• Familiarity with container security and hybrid clouds (OpenShift, Kubernetes).
• DevSecOps exposure, CI/CD security tooling and secure software supply chain.

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents and LLDs for major transformation programs
• Design secure patterns for integration approaches including REST APIs, microservices, event-driven systems, and batch processing in payment environments
• Assess solution designs, identify security gaps, evaluate risk, and recommend mitigations and best practices
• Apply core security standards and principles (OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, secrets management, WAF, and related controls)
• Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business and Risk stakeholders
• Collaborate closely with delivery teams to embed secure-by-design principles across architecture and implementation
• Ensure security design compliance with PSD2, SWIFT CSP, PCI DSS and local requirements
• Support engineering teams during implementation and resolve security-related technical challenges

Skills

Network security

Security architecture

Risk assessment

Stakeholder communication

Regulatory compliance

OpenShift/Kubernetes familiarity

Education

TOGAF

SABSA

Tools

OAuth2

OIDC

SAML2

mTLS/PKI

WAF

SIEM

PCI DSS

OpenShift

Kubernetes

CI/CD security

Job description

EPAM Systems in Poland is seeking a Network Security Architect to lead the design and implementation of secure network and application security solutions for large-scale digital banking initiatives. You will collaborate with architecture, engineering, and risk teams to ensure regulatory compliance and robust, secure-by-design architectures.

Key responsibilities include defining As-Is/To-Be security architectures, designing secure patterns for APIs and microservices, and guiding security design