AWS Cloud Security Engineer - IAM, PKI & Secrets (Remote)

EPAM Systems; Austin (TX); Remote; USD 150.000 - 160.000; Vollzeit

Benefits dieser Stelle

Medical, Dental and Vision Insurance (

Health Savings Account

Flexible Spending Accounts (Healthcare

Short-Term and Long-Term Disability

Life and AD&D Insurance

Employee Assistance Program

LinkedIn learning access

Matched 401(k)

Paid Time Off

Paid Holidays

Legal Plan

Identity Theft Protection

Accident Insurance

Employee Discounts

Pet Insurance

Employee Stock Purchase Program

Discretionary annual bonus

Discretionary Long-Term Incentive

Zusammenfassung

EPAM Systems seeks a Cloud Security Engineer to architect, implement, and automate security controls across AWS for multi-region fintech workloads. You will design IAM policies, manage PKI and TLS, and enforce posture monitoring with GuardDuty, Security Hub, and CloudTrail.

In this role, you will integrate Secrets Manager, KMS, and External Secrets Operator, while aligning with PCI-fintech audit requirements and CSPM frameworks. This is a remote role with geolocation restrictions outside NYC.

Qualifikationen

• Hands-on AWS IAM and CSPM experience.
• Security-as-code automation using CDK and TypeScript.
• Experience supporting PCI-fintech audits and controls.

Aufgaben

• Identity & Access Management: Design and enforce secure AWS IAM policies, roles, permission boundaries, SCPs, and EKS Pod Identity/IRSA configurations.
• Cloud Detection & Posture Management: Implement and manage security monitoring and posture tools (GuardDuty, Security Hub, CloudTrail, Macie, IAM Access Analyzer).
• PKI & Certificate Management: Manage automated certificate lifecycles using AWS Private CA, ACM, and mTLS trust stores.
• Secrets & Encryption: Secure data with AWS KMS, Secrets Manager, and External Secrets Operator.

Kenntnisse

AWS IAM design

Security-as-code

TypeScript

Tools

AWS CDK

GuardDuty

Security Hub

CloudTrail

Macie

IAM Access Analyzer

KMS

ACM

Cosign/SLSA

External Secrets Operator

Jobbeschreibung

EPAM Systems seeks a Cloud Security Engineer to architect, implement, and automate security controls across AWS for multi-region fintech workloads. You will design IAM policies, manage PKI and TLS, and enforce posture monitoring with GuardDuty, Security Hub, and CloudTrail.

In this role, you will integrate Secrets Manager, KMS, and External Secrets Operator, while aligning with PCI-fintech audit requirements and CSPM frameworks. This is a remote role with geolocation restrictions outside NYC.