Cloud Security Architect with AI

EPAM Systems; Turkey; On-site; TRY 6,021,000 - 9,032,000; Full time

Benefits offered by this job

Continuous upskilling

Mentoring programs

Certification support

English courses

Private health insurance

Referral bonuses

Job summary

EPAM Systems Inc in Turkey seeks an experienced Cloud Security Architect to design secure cloud solutions across cloud, hybrid and on‑premises environments, with a primary focus on cloud security architecture and CSPM. You will collaborate with cross‑functional teams to embed security into every layer of the cloud, while driving innovation through modern tools and automation.

You will work to strengthen posture management capabilities, define reference architectures, and leverage AI‑driven

Qualifications

• 5+ years of information security experience with focus on security architecture and design.
• Hands-on cloud security architecture experience on major cloud platforms.
• Proficiency with CSPM, CNAPP, IAM, network security and data protection.

Responsibilities

• Design and implement security architectures across cloud, hybrid and on‑premises environments.
• Gather requirements to design secure cloud solutions for migrations and improvements.
• Develop reference architectures, security standards and secure design patterns.
• Collaborate with security, engineering and compliance teams to embed security.

Skills

Cloud security architecture

AI-assisted automation

Threat modeling

Security governance

Communication and collaboration

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience

Tools

Terraform

CloudFormation

Bicep

Python

PowerShell

Kubernetes

Job description

We are seeking an experienced Cloud Security Architect with a passion for AI-assisted automation to design and implement secure cloud solutions across complex environments.In this role, you will shape cloud security architectures, strengthen posture management capabilities, and leverage AI-driven workflows to enhance security operations. You will collaborate with cross-functional teams to embed security into every layer of the cloud, while driving innovation through modern tools and automation.ResponsibilitiesDesign and implement security architectures and controls across cloud, hybrid and on-premises environments, with a primary focus on cloud securityGather business, technical and compliance requirements to design secure cloud solutions for new implementations, migrations and security improvementsDefine and improve cloud security capabilities, including IAM, network security, data protection, workload security, logging, monitoring and governanceEnhance Cloud Security Posture Management (CSPM) capabilities, including misconfiguration detection, compliance monitoring, risk prioritization and remediationConduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrationsDevelop cloud security reference architectures, security standards, configuration baselines and secure design patternsEvaluate cloud security technologies, including CSPM, CNAPP, cloud-native security services and security automation solutionsCollaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec and compliance teams to integrate security into cloud solutionsSupport security automation using Terraform, PowerShell, Python, REST APIs or similar technologiesLeverage AI-assisted tools and workflows to improve cloud security activities, including cloud configuration and vulnerability analysis, security risk assessment and remediation recommendations, security policy and compliance analysis, security scripting, reporting and documentation, and repetitive task and workflow automationIdentify opportunities for AI-assisted security automation while ensuring appropriate validation, data protection and human oversightCommunicate security risks, architectural decisions and remediation plans to stakeholders and security leadershipRequirementsBachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience5+ years of information security experience, with a focus on security architecture and designExperience delivering or significantly contributing to cloud security architecture, implementation or modernization projectsHands-on expertise in at least one major cloud platform (Azure, AWS or GCP) and its native security services and controlsUnderstanding of cloud security architecture, including IAM, network segmentation and encryption, as well as key management, workload protection, logging and monitoringPractical experience with Cloud Security Posture Management (CSPM), cloud security assessments, configuration reviews and risk remediationFamiliarity with cloud security tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud or similarWorking knowledge of related security domains, including IAM, network security, application security, data protection and security operations, without requiring deep specialization in eachKnowledge of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or CIS BenchmarksProficiency in Infrastructure as Code, scripting and cloud security automationIntermediate practical experience with AI-assisted tools and automation, including using AI tools for security analysis, troubleshooting and technical research, applying structured prompting for technical tasks, generating and validating scripts, queries and security documentation with AI, using AI to simplify repetitive security workflows, and basic experience configuring AI-assisted workflows or integrationsUnderstanding of safe AI usage, including data protection, access control and validation of AI-generated outputs, with willingness to further develop AI automation skillsStrong communication and collaboration skills, with hands-on technical proficiency as a mustEnglish proficiency at an Upper-Intermediate level (B2) or higherNice to haveExperience with multiple cloud platforms, hybrid or multi-cloud security architecturesSkills in CNAPP, CWPP, CIEM, cloud governance and policy-as-code solutionsProficiency in Terraform, CloudFormation, Bicep, Python, PowerShell or similar automation technologiesFamiliarity with Kubernetes, container security, DevSecOps or CI/CD securityBackground in integrating cloud security solutions with SIEM/SOAR platformsExpertise in AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Power Automate or similar toolsUnderstanding of AI security risks, including prompt injection, data leakage and insecure tool usageSecurity or cloud certifications such as CISSP, CISM, CCSP, CCSK, SC-100, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer or similarAI-related certifications such as AI-900, Claude Certified Architect or AWS Certified AI PractitionerWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.