Senior AWS IAM & Cloud Security Engineer

EPAM Systems Inc; Atlanta (GA); Remote; USD 150,000 - 160,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Matching

Paid Time Off

Life Insurance

Learning & Development

Job summary

EPAM Systems is seeking a Cloud Security Engineer to design and enforce secure AWS IAM, certificate management, and data protection across multi-region environments. You will automate security controls and posture management for PCI-scoped fintech workloads.

You will work with GuardDuty, Security Hub, Macie, and IAM Access Analyzer, and implement secure PKI workflows with AWS Private CA and mTLS. This role emphasizes security-as-code and compliance.”

Qualifications

• Baseline: strong hands-on AWS CDK and TypeScript for security-as-code automation.
• Deep expertise in AWS Private CA, TLS/PKI, automated cert issuance/rotation/revocation, and PCI workflows.
• Proficiency with GuardDuty, Security Hub, Macie, and IAM Access Analyzer.
• Experience supporting PCI-scoped fintech audits and CSPM frameworks.
• Advanced IAM concepts: roles, trust policies, permission boundaries, SCPs, IRSA/EKS.
• SAST tools (SonarQube, CodeQL), Dependabot, and software supply chain security.

Responsibilities

• Design and enforce secure AWS IAM policies, roles, and SCPs.
• Implement security monitoring and posture tools across AWS services.
• Build and manage automated certificate lifecycle workflows (AWS Private CA, ACM, mTLS).
• Secure data with KMS, Secrets Manager, and External Secrets Operator.

Skills

AWS CDK

TypeScript

IAM

CSPM

PCI compliance

PKI

GuardDuty

Security Hub

Macie

IAM Access Analyzer

Tools

GuardDuty

Security Hub

Macie

IAM Access Analyzer

KMS

Job description

EPAM Systems is seeking a Cloud Security Engineer to design and enforce secure AWS IAM, certificate management, and data protection across multi-region environments. You will automate security controls and posture management for PCI-scoped fintech workloads.

You will work with GuardDuty, Security Hub, Macie, and IAM Access Analyzer, and implement secure PKI workflows with AWS Private CA and mTLS. This role emphasizes security-as-code and compliance.”