Remote Cloud Security Engineer — AWS IAM & PKI Lead

EPAM Systems Inc; Boston (MA); A distancia; USD 150.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, Dental and Vision Insurance (

401(k) Retirement Savings Plan

Paid Time Off

Descripción de la vacante

EPAM Systems Inc. is seeking a Cloud Security Engineer to secure a multi-region architecture.

You will architect, implement, and automate robust security controls across AWS, focusing on IAM, PKI, secrets management, and CSPM for PCI-scoped fintech workloads. Responsibilities include IAM policy design, posture management with GuardDuty and Security Hub, and certificate lifecycle workflows using Private CA and ACM.

Formación

• Strong hands-on experience with security automation using AWS CDK and TypeScript.
• Deep expertise in AWS PKI (Private CA), TLS, and certificate lifecycle automation.
• Experience with CSPM, PCI scope fintech audits, and IAM best practices.

Responsabilidades

• Design and enforce secure AWS IAM policies, roles and SCPs.
• Implement security monitoring across AWS services (GuardDuty, Security Hub, CloudTrail, Macie).
• Build and manage certificate workflows using AWS Private CA and ACM, with PKI integration.
• Secure data using KMS, Secrets Manager, and External Secrets in multi-region environments.

Conocimientos

AWS IAM

Security as code

PCI compliance

Herramientas

AWS CDK

TypeScript

GuardDuty

Security Hub

CloudTrail

Macie

KMS

Secrets Manager

IRSA

Descripción del empleo

EPAM Systems Inc. is seeking a Cloud Security Engineer to secure a multi-region architecture.

You will architect, implement, and automate robust security controls across AWS, focusing on IAM, PKI, secrets management, and CSPM for PCI-scoped fintech workloads. Responsibilities include IAM policy design, posture management with GuardDuty and Security Hub, and certificate lifecycle workflows using Private CA and ACM.