Senior Platform Security Engineer

EPAM Systems; Polska; Hybrid; PLN 210,000 - 300,000; Full time

Benefits offered by this job

Hybrid by design

Remote work within Poland

Relocation opportunities

60 days abroad per year

Stock Purchase Plan 15% discount

Health insurance

Job summary

EPAM Systems is seeking a Senior Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments.

The role focuses on building IaC pipelines with Jenkins, Terraform and Chef, configuring Windows Server GPOs, and developing AWS-based infrastructure to support secure image creation. Hybrid work in Poland appreciated.

Qualifications

• 5+ years of platform security engineering experience.
• Knowledge of Level 1 CIS benchmarks.
• Proficiency with Jenkins, Terraform and Chef Infra.
• Expertise in Amazon Web Services.
• Windows Administration including Group Policy Objects for Windows Server 2019/2022/2025.
• English proficiency at B2 or higher.

Responsibilities

• Automate hardening of golden images to CIS Level 1.
• Build and maintain IaC pipelines using Jenkins, Terraform and Chef.
• Configure Windows GPOs for Server 2019/2022/2025.
• Develop AWS infrastructure to support secure image creation.
• Create Packer and Vagrant templates for image builds.
• Apply CIS Level 1 standards across platforms.
• Collaborate to integrate security automation into workflows.
• Troubleshoot issues in automation and hardening pipelines.
• Document processes and configurations for image hardening and compliance.

Skills

5+ years experience

CIS Level 1

Jenkins

Terraform

Chef Infra

AWS

Windows Admin

English B2

Tools

Vagrant

Packer

Wiz CSPM

Job description

We are seeking a Senior Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments.

Responsibilities

• Automate the hardening of golden images to meet Level 1 CIS benchmark requirements
• Build and maintain infrastructure as code pipelines using Jenkins, Terraform and Chef
• Configure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systems
• Develop and manage AWS-based infrastructure to support secure image creation
• Create and maintain Packer and Vagrant templates for golden image builds
• Apply Level 1 CIS benchmark standards across all supported platforms
• Collaborate with cross-functional teams to integrate security automation into existing workflows
• Troubleshoot and resolve issues within the automation and hardening pipeline
• Document processes and configurations related to image hardening and compliance

Requirements

• 5+ years of experience in platform security engineering or a related field
• Knowledge of Level 1 CIS benchmarks
• Proficiency in Jenkins, Terraform and Chef Infra
• Expertise in Amazon Web Services
• Skills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025
• English proficiency at B2 level or higher

Nice to have

• Familiarity with HashiCorp Vagrant and Packer
• Knowledge of Wiz CSPM

We offer

• We gather like-minded people:
  • Top tech minds driving innovation in AI, cloud and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid by design mode and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
  • Career development programs
  • Thought leadership, mentoring, soft skills and well-being programs
  • Certification (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
• We cover it all:
  • Stable pay
  • Participation in the Employee Stock Purchase Plan with a 15% discount
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Referral bonuses up to $2,000
  • Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
  • Corporate, social and well-being events
• Please, note:
  • Benefits listed above are available to employees only
  • We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
  • We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI‑Native enterprises, driving measurable value from innovation and digital investments.