Lead Data Security Solution Engineer

EPAM Systems Inc; United States; A distancia; USD 150.000 - 190.000; Jornada completa

Descripción de la vacante

EPAM Systems Inc. seeks a Lead Data Security Solution Engineer to review requirements and design secure, scalable database solutions for BR Data In-Licensing.

The role emphasizes identity-based authentication, fine-grained authorization, data firewalling, and defensible deletion across relational data stores. You will prototype solutions, implement row- and column-level controls, establish auditing and revocation strategies, and collaborate with IAM, security architecture, and governance teams.

Formación

• 5+ years of relevant experience, including at least 1 year in a leadership role.
• Hands-on experience with relational databases, SQL, and database architecture.
• Experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms.
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.
• Experience designing secure database connectivity for applications, analytical tools, APIs, ETL/ELT, and data pipelines.
• Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.
• English proficiency at an Upper-Intermediate level (B2) or higher.

Responsabilidades

• Review requirements and assess relational database platforms, data flows, entitlement rules, and dependencies.
• Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.
• Design authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication.
• Design database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering.
• Design database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes.
• Design controls for access revocation when roles change or licensing rights expire; address deletion implications for backups, archives, replication, and referential integrity.
• Translate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost.
• Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes and recommendations.

Conocimientos

Leadership

SQL

Database architecture

Security design

Herramientas

OAuth 2.0

OIDC

Secrets management

Auditing tooling

Descripción del empleo

Lead Data Security Solution Engineer

We are seeking a Lead Data Security Solution Engineer to review requirements produced by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing. The landscape is predominantly relational, with primary control at the data and database layer, emphasizing identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.

Responsibilities

• Review Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; assess relational database platforms, schemas, connectivity methods, query patterns, and identify where licensed data is stored, transformed, replicated, extracted, or backed up
• Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites
• Design authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; reduce reliance on shared or long-lived credentials
• Design database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logic
• Design database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; ensure audit records are searchable, protected, and useful for investigation
• Design controls for access revocation when users change roles or licensing rights expire; design methods to identify and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanisms
• Translate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; collaborate with database, IAM, security architecture, infrastructure, application, and governance teams
• Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendations

Requirements

• 5+ years of relevant experience, including at least 1 year in a leadership role
• Strong hands-on experience with relational databases, SQL, and database architecture, including schemas, roles, privileges, and access paths
• Practical experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management
• Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines
• Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support
• Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications
• Ability to evaluate heterogeneous database technologies and design platform-appropriate controls
• Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills
• English proficiency at an Upper-Intermediate level (B2) or higher

Nice to have

• Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies
• Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environments
• Experience designing and executing security POCs and converting validated patterns into production-ready designs
• Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data