Cloud Security Architect with AI

EPAM Systems; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

EPAM Systems Inc. seeks an experienced Cloud Security Architect to design and implement secure cloud solutions across hybrid and on-prem environments with a focus on cloud security and posture management.

The role emphasizes AI-assisted automation, threat modeling, and security governance across IAM, network security and encryption. The ideal candidate has 5+ years in information security, hands-on cloud experience (Azure, AWS or GCP) and proficiency in IaC, scripting and modern security tools.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
• 5+ years of information security experience, with a focus on security architecture and design.
• Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects.
• Hands-on with at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls.
• Understanding of cloud security architecture, including IAM, network segmentation and encryption, as well as key management, workload protection, logging and monitoring.
• Practical experience with CSPM, cloud security assessments, configuration reviews and risk remediation.
• Familiarity with cloud security tools such as Defender for Cloud, Security Hub, Security Command Center, Wiz, Prisma Cloud or similar.
• Proficiency with Infrastructure as Code and scripting, and cloud security automation.
• Intermediate practical experience with AI-assisted tools and automation for security tasks.
• Understanding of safe AI usage, data protection and validation of AI outputs.
• Strong communication and collaboration skills; hands-on technical proficiency a must.
• English proficiency at Upper-Intermediate level (B2) or higher.
• Nice to have multi-cloud/hybrid security architectures.
• Skills in CNAPP, CWPP, CIEM, cloud governance and policy-as-code.
• Proficiency in Terraform, CloudFormation, Bicep, Python, PowerShell.
• Familiarity with Kubernetes, container security, DevSecOps or CI/CD security.
• Experience integrating cloud security with SIEM/SOAR platforms.
• Expertise in AI automation: Microsoft Copilot Studio, Azure OpenAI, AWS Bedrock, Power Automate.
• Understanding of AI security risks (prompt injection, data leakage, insecure tool usage).
• Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, AZ-500, AWS Security Specialty, or Google Cloud Security Engineer.

Responsibilities

• Design and implement security architectures and controls across cloud, hybrid and on-premises environments, focusing on cloud security.
• Gather business, technical and compliance requirements to design secure cloud solutions for new implementations and migrations.
• Define and improve cloud security capabilities including IAM, network security, data protection, workload security, logging and governance.
• Enhance CSPM capabilities including misconfiguration detection, compliance monitoring, risk prioritization and remediation.
• Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations.
• Develop cloud security reference architectures, security standards, baselines and secure design patterns.
• Evaluate cloud security technologies including CSPM, CNAPP, cloud-native security services and automation solutions.
• Collaborate with cloud engineering, infrastructure, development, security ops, IAM, AppSec and compliance teams to integrate security into cloud solutions.
• Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies.
• Leverage AI-assisted tools to improve cloud security activities: configuration, risk assessment, and remediation recommendations; policy and documentation.

Skills

Cloud security architecture

IAM

Network security

Data encryption

Infrastructure as Code

Scripting

Terraform

Kubernetes

Python

PowerShell

Azure

AWS

GCP

AI automation

CI/CD security

SIEM/SOAR

CISSP

CISM

CCSP

Education

Bachelor's degree

Tools

Microsoft Defender for Cloud

AWS Security Hub

Google Cloud Security

Wiz

Prisma Cloud

Job description

We are seeking an experienced Cloud Security Architect with a passion for AI-assisted automation to design and implement secure cloud solutions across complex environments. In this role, you will shape cloud security architectures, strengthen posture management capabilities, and leverage AI-driven workflows to enhance security operations. You will collaborate with cross-functional teams to embed security into every layer of the cloud, while driving innovation through modern tools and automation.

Responsibilities

• Design and implement security architectures and controls across cloud, hybrid and on-premises environments, with a primary focus on cloud security
• Gather business, technical and compliance requirements to design secure cloud solutions for new implementations, migrations and security improvements
• Define and improve cloud security capabilities, including IAM, network security, data protection, workload security, logging, monitoring and governance
• Enhance Cloud Security Posture Management (CSPM) capabilities, including misconfiguration detection, compliance monitoring, risk prioritization and remediation
• Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations
• Develop cloud security reference architectures, security standards, configuration baselines and secure design patterns
• Evaluate cloud security technologies, including CSPM, CNAPP, cloud-native security services and security automation solutions
• Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec and compliance teams to integrate security into cloud solutions
• Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies
• Leverage AI-assisted tools and workflows to improve cloud security activities, including cloud configuration and vulnerability analysis, security risk assessment and remediation recommendations, security policy and compliance analysis, security scripting, reporting and documentation, and repetitive task and workflow automation
• Identify opportunities for AI-assisted security automation while ensuring appropriate validation, data protection and human oversight
• Communicate security risks, architectural decisions and remediation plans to stakeholders and security leadership

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience
• 5+ years of information security experience, with a focus on security architecture and design
• Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects
• Hands-on expertise in at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls
• Understanding of cloud security architecture, including IAM, network segmentation and encryption, as well as key management, workload protection, logging and monitoring
• Practical experience with Cloud Security Posture Management (CSPM), cloud security assessments, configuration reviews and risk remediation
• Familiarity with cloud security tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud or similar
• Working knowledge of related security domains, including IAM, network security, application security, data protection and security operations, without requiring deep specialization in each
• Knowledge of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or CIS Benchmarks
• Proficiency in Infrastructure as Code, scripting and cloud security automation
• Intermediate practical experience with AI-assisted tools and automation, including using AI tools for security analysis, troubleshooting and technical research, applying structured prompting for technical tasks, generating and validating scripts, queries and security documentation with AI, using AI to simplify repetitive security workflows, and basic experience configuring AI-assisted workflows or integrations
• Understanding of safe AI usage, including data protection, access control and validation of AI-generated outputs, with willingness to further develop AI automation skills
• Strong communication and collaboration skills, with hands-on technical proficiency as a must
• English proficiency at an Upper-Intermediate level (B2) or higher
• Nice to have Experience with multiple cloud platforms, hybrid or multi-cloud security architectures
• Skills in CNAPP, CWPP, CIEM, cloud governance and policy-as-code solutions
• Proficiency in Terraform, CloudFormation, Bicep, Python, PowerShell or similar automation technologies
• Familiarity with Kubernetes, container security, DevSecOps or CI/CD security
• Background in integrating cloud security solutions with SIEM/SOAR platforms
• Expertise in AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Power Automate or similar tools
• Understanding of AI security risks, including prompt injection, data leakage and insecure tool usage
• Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, SC-100, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer or similar AI-related certifications such as AI-900, Claude Certified Architect or AWS Certified AI Practitioner