Senior Cloud Security & Compliance Engineer

EPAM Systems Inc; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

EPAM Systems seeks a Senior Cloud Security Specialist to lead compliance engineering across HIPAA and FedRAMP/NIST 800-53 programs, translating regulatory requirements into engineering work while supporting audits and cross-functional initiatives.

Responsibilities include turning gap analyses into Azure DevOps items, maintaining backlog hygiene for access control and data handling, coordinating with ISRM, Privacy, and Legal, and delivering evidence to auditors.

Qualifications

• 3+ years in security/privacy compliance, GRC, or compliance engineering in HIPAA/FedRAMP/NIST contexts.
• Knowledge of HIPAA Security & Privacy Rules and NIST 800-53 control families.
• Ability to map regulatory language to scoped engineering backlog items.

Responsibilities

• Convert HIPAA gap analyses and NIST controls into scoped Azure DevOps Features/Stories/Tasks with clear acceptance criteria.
• Maintain backlog hygiene for access control, data classification, logging, retention, and deletion.
• Coordinate with ISRM, Privacy, Legal to gather artifacts for audits.
• Write and execute test cases to verify controls, including privileged access restrictions and PII minimization.
• Deliver auditor evidence and status updates; build automation to streamline future cycles.

Skills

Scripting (Python or Bash)

Regulatory compliance

Audit readiness

Cross-functional collaboration

Cloud security

Education

Certifications: CIPP/US, CIPM, HCISPP, CISA, CISSP or AWS/Azure security cert

Tools

Azure DevOps

Jira

SailPoint

Snyk

Qualys

Burp

Job description

EPAM Systems seeks a Senior Cloud Security Specialist to lead compliance engineering across HIPAA and FedRAMP/NIST 800-53 programs, translating regulatory requirements into engineering work while supporting audits and cross-functional initiatives.

Responsibilities include turning gap analyses into Azure DevOps items, maintaining backlog hygiene for access control and data handling, coordinating with ISRM, Privacy, and Legal, and delivering evidence to auditors.