Remote Senior AWS IAM & PKI Security Engineer

EPAM Systems; United States; Remote; USD 150,000 - 160,000; Full time

Benefits offered by this job

401(k) Match

Paid Time Off

Health Insurance

Employee Discounts

Job summary

EPAM Systems is seeking a Cloud Security Engineer to architect and implement robust security controls across AWS for multi-region fintech workloads, ensuring PCI compliance. You will work on IAM, PKI, secrets management, CSPM, and automated security across GuardDuty, Security Hub, CloudTrail, Macie, and KMS, with a focus on security-as-code using CDK and TypeScript.

This remote role in the United States offers a comprehensive benefits package and the chance to influence security across a growing

Qualifications

• Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation.
• Deep expertise in AWS Private CA (HSM-backed), ACM, mTLS trust stores, automated certificate issuance/rotation/revocation.
• Proficiency with GuardDuty, Security Hub, Macie, and IAM Access Analyzer.
• Experience supporting PCI-scoped fintech audits and CSPM frameworks.
• Advanced IAM, Secrets Management (Secrets Manager, External Secrets), and KMS/MRK encryption.

Responsibilities

• Design and enforce secure AWS IAM policies, roles, permission boundaries, SCPs, and EKS Pod Identity configurations.
• Implement and manage security monitoring and posture tools including GuardDuty, Security Hub, CloudTrail, Macie, and IAM Access Analyzer.
• Build and manage automated certificate lifecycle workflows using AWS Private CA, ACM, and mTLS, coordinating with client security approvals.
• Secure sensitive data using AWS KMS (including multi-region keys) and Secrets Manager.

Skills

AWS CDK

TypeScript

IAM & SCPs

CSPM

PKI & TLS

Secrets Management

PCI compliance

Security automation

Tools

GuardDuty

Security Hub

CloudTrail

Macie

IAM Access Analyzer

Cosign

Job description

EPAM Systems is seeking a Cloud Security Engineer to architect and implement robust security controls across AWS for multi-region fintech workloads, ensuring PCI compliance. You will work on IAM, PKI, secrets management, CSPM, and automated security across GuardDuty, Security Hub, CloudTrail, Macie, and KMS, with a focus on security-as-code using CDK and TypeScript.

This remote role in the United States offers a comprehensive benefits package and the chance to influence security across a growing