Lead Data Security Solutions Engineer

EPAM Systems Inc; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

EPAM Systems Inc. seeks a Lead Data Security Solution Engineer to review requirements and design secure, scalable database solutions for BR Data In-Licensing.

The role emphasizes identity-based authentication, fine-grained authorization, data firewalling, and defensible deletion across relational data stores. You will prototype solutions, implement row- and column-level controls, establish auditing and revocation strategies, and collaborate with IAM, security architecture, and governance teams.

Qualifications

• 5+ years of relevant experience, including at least 1 year in a leadership role.
• Hands-on experience with relational databases, SQL, and database architecture.
• Experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms.
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.
• Experience designing secure database connectivity for applications, analytical tools, APIs, ETL/ELT, and data pipelines.
• Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.
• English proficiency at an Upper-Intermediate level (B2) or higher.

Responsibilities

• Review requirements and assess relational database platforms, data flows, entitlement rules, and dependencies.
• Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.
• Design authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication.
• Design database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering.
• Design database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes.
• Design controls for access revocation when roles change or licensing rights expire; address deletion implications for backups, archives, replication, and referential integrity.
• Translate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost.
• Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes and recommendations.

Skills

Leadership

SQL

Database architecture

Security design

Tools

OAuth 2.0

OIDC

Secrets management

Auditing tooling

Job description

EPAM Systems Inc. seeks a Lead Data Security Solution Engineer to review requirements and design secure, scalable database solutions for BR Data In-Licensing.

The role emphasizes identity-based authentication, fine-grained authorization, data firewalling, and defensible deletion across relational data stores. You will prototype solutions, implement row- and column-level controls, establish auditing and revocation strategies, and collaborate with IAM, security architecture, and governance teams.