Cloud Security Architect: AI-Driven Security & Automation

EPAM Systems; United States; A distancia; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

EPAM Systems Inc. seeks an experienced Cloud Security Architect to design and implement secure cloud solutions across hybrid and on-prem environments with a focus on cloud security and posture management.

The role emphasizes AI-assisted automation, threat modeling, and security governance across IAM, network security and encryption. The ideal candidate has 5+ years in information security, hands-on cloud experience (Azure, AWS or GCP) and proficiency in IaC, scripting and modern security tools.

Formación

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 5+ years of information security experience, with a focus on security architecture and design.
• Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects.
• Hands-on with at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls.
• Understanding of cloud security architecture, including IAM, network segmentation and encryption, as well as key management, workload protection, logging and monitoring.
• Practical experience with CSPM, cloud security assessments, configuration reviews and risk remediation.
• Familiarity with cloud security tools such as Defender for Cloud, Security Hub, Security Command Center, Wiz, Prisma Cloud or similar.
• Proficiency with Infrastructure as Code and scripting, and cloud security automation.
• Intermediate practical experience with AI-assisted tools and automation for security tasks.
• Understanding of safe AI usage, data protection and validation of AI outputs.
• Strong communication and collaboration skills; hands-on technical proficiency a must.
• English proficiency at Upper-Intermediate level (B2) or higher.
• Nice to have multi-cloud/hybrid security architectures.
• Skills in CNAPP, CWPP, CIEM, cloud governance and policy-as-code.
• Proficiency in Terraform, CloudFormation, Bicep, Python, PowerShell.
• Familiarity with Kubernetes, container security, DevSecOps or CI/CD security.
• Experience integrating cloud security with SIEM/SOAR platforms.
• Expertise in AI automation: Microsoft Copilot Studio, Azure OpenAI, AWS Bedrock, Power Automate.
• Understanding of AI security risks (prompt injection, data leakage, insecure tool usage).
• Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, AZ-500, AWS Security Specialty, or Google Cloud Security Engineer.

Responsabilidades

• Design and implement security architectures and controls across cloud, hybrid and on-premises environments, focusing on cloud security.
• Gather business, technical and compliance requirements to design secure cloud solutions for new implementations and migrations.
• Define and improve cloud security capabilities including IAM, network security, data protection, workload security, logging and governance.
• Enhance CSPM capabilities including misconfiguration detection, compliance monitoring, risk prioritization and remediation.
• Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations.
• Develop cloud security reference architectures, security standards, baselines and secure design patterns.
• Evaluate cloud security technologies including CSPM, CNAPP, cloud-native security services and automation solutions.
• Collaborate with cloud engineering, infrastructure, development, security ops, IAM, AppSec and compliance teams to integrate security into cloud solutions.
• Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies.
• Leverage AI-assisted tools to improve cloud security activities: configuration, risk assessment, and remediation recommendations; policy and documentation.

Conocimientos

Cloud security architecture

IAM

Network security

Data encryption

Infrastructure as Code

Scripting

Terraform

Kubernetes

Python

PowerShell

Azure

AWS

GCP

AI automation

CI/CD security

SIEM/SOAR

CISSP

CISM

CCSP

Educación

Bachelor's degree

Herramientas

Microsoft Defender for Cloud

AWS Security Hub

Google Cloud Security

Wiz

Prisma Cloud

Descripción del empleo

EPAM Systems Inc. seeks an experienced Cloud Security Architect to design and implement secure cloud solutions across hybrid and on-prem environments with a focus on cloud security and posture management.

The role emphasizes AI-assisted automation, threat modeling, and security governance across IAM, network security and encryption. The ideal candidate has 5+ years in information security, hands-on cloud experience (Azure, AWS or GCP) and proficiency in IaC, scripting and modern security tools.