All vacancies
Lead AWS IAM Security Engineer
EPAM Systems
Remote · United StatesSalary not disclosedfull-timeEPAM Systems Careers (remote abroad)
We are looking for a specialized Cloud Security Engineer to secure our next-generation multi-region architecture. In this role, you will architect, implement, and automate robust security controls across AWS — spanning enterprise IAM, Public Key Infrastructure (PKI), secrets management, and cloud security posture management (CSPM) — while ensuring strict compliance for PCI-scoped fintech workloads.
Responsibilities
- Identity & Access Management
- Design and enforce secure AWS IAM policies, roles, permission boundaries, Service Control Policies (SCPs), and EKS Pod Identity / IRSA configurations
- Cloud Detection & Posture Management
- Implement and manage security monitoring and posture tools including Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer
- PKI & Certificate Management
- Build and manage automated certificate lifecycle workflows using AWS Private CA (FIPS 140-2 Level 3 HSM-backed), ACM, and mTLS trust stores, coordinating closely with the client's Security approvals
- Secrets & Encryption: Secure sensitive data using AWS KMS (including Multi-Region Keys), Secrets Manager, and the External Secrets Operator
Languages
- Work format
- Remote
- Seniority
- Lead
- Posted
- 29 Sept 2026
- Last verified
- In the last 5 days
Similar roles
- Cyber Security Engineer | Remote - ContractXperteez Technology · Remote · worldwide, UTC+4 accepted
- Data Privacy Security EngineerBjak · Remote · worldwide, UTC+4 accepted
- Backend Security Engineermicro1 · Remote · worldwide, UTC+4 accepted
- Application Security EngineerTripleTen · Remote · Armenia
- Mid Network EngineerDigitain · Armenia · On-site
- Embedded Linux Senior Software Engineer - OptimisationCanonical · Remote · worldwide