Senior Security Architect - APIs, Microservices & Payments

HireHi; Polska; On-site; PLN 180,000 - 260,000; Full time

Job summary

EPAM is seeking a seasoned Security Architect to lead security architecture for large transformation programs in financial services. You will define secure patterns, assess risks, and ensure compliance with PSD2, PCI DSS, and related standards, while guiding delivery teams and stakeholders.

Requires 7+ years in security architecture, deep API/security design expertise, and hands-on modern security tooling such as OAuth2, OIDC, SAML2, mTLS, encryption, and PKI.

Qualifications

• 7+ years of experience in network or security architecture roles.
• Experience producing governance artifacts such as As-Is/Target states, HLDs, and LLDs.
• Expertise in security design for APIs, microservices, data flows, and system integrations.
• Strong knowledge of OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, and secrets management.
• Excellent communication and ability to influence technical and business teams.

Responsibilities

• Define and deliver As-Is and Target Security Architecture assessments, High-Level Security Design Documents, and LLDs for major transformation programs.
• Design secure integration patterns for REST APIs, microservices, event-driven systems, and batch processing in payment environments.
• Assess other architects’ solution designs, identify security gaps, evaluate risks, and recommend mitigations and best practices.
• Apply security standards and principles including OAuth2, OIDC, SAML2, mTLS/PKI, encryption, tokenization, HSM, secrets management, network zoning, and firewall configurations.
• Track and manage security design decisions, document risk implications, and negotiate options with Technology, Business, and Risk stakeholders.
• Collaborate with delivery teams to embed secure-by-design principles across architecture and implementation.
• Ensure security design compliance with PSD2, SWIFT CSP, PCI DSS, and local requirements.
• Support engineering teams during implementation and resolve security-related technical challenges.

Job description

EPAM is seeking a seasoned Security Architect to lead security architecture for large transformation programs in financial services. You will define secure patterns, assess risks, and ensure compliance with PSD2, PCI DSS, and related standards, while guiding delivery teams and stakeholders.

Requires 7+ years in security architecture, deep API/security design expertise, and hands-on modern security tooling such as OAuth2, OIDC, SAML2, mTLS, encryption, and PKI.