{"id":3791739,"url":"https://alion.io/job/epam-systems-cloud-security-architect-aws-data-platforms","title":"Cloud Security Architect - AWS & Data Platforms","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"C","score":59,"open_postings":83,"ghost_share":0.627,"stale_share":0,"repost_share":0.253,"time_to_fill_p50_days":31,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania","Kaunas, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5600,"max":7200,"currency":"EUR","period":"month","gross":true,"usd_annual":96996},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Snowflake","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Checkov","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Snyk","optional":true},{"name":"Trivy","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-11-05T02:41:54Z","employer_posted_date":null,"last_verified_at":"2026-11-05T02:41:54Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\nWe are looking for a hands-on Cloud Security Architect to strengthen security across enterprise cloud and data platforms.\n\nThe role focuses on security architecture, identity and access management (IAM), vulnerability management, DevSecOps, and compliance. You will turn enterprise security requirements into practical, automated controls across AWS, Snowflake, GitHub, and supporting services, working closely with platform engineering and central Security/IAM teams.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nDesign and review secure AWS and data-platform architectures, including network segmentation, encryption, secrets management, logging, and workload isolation\n\nPerform threat modeling, security design reviews, and technical risk assessments; define reusable security patterns and guardrails\n\nAlign solutions with enterprise security policies, ISO 27001, GDPR, and applicable pharmaceutical/GxP requirements\n\nSupport audits, security control assessments, evidence collection, and risk remediation\n\nDesign IAM for AWS, Snowflake, GitHub, and service integrations using least privilege, RBAC/ABAC, SSO, SAML, and OIDC\n\nImprove role models, privileged access, service identities, authentication, authorization, and secrets management; review and remediate excessive permissions and access misconfigurations\n\nCollaborate with central IAM on identity lifecycle, access reviews, provisioning/deprovisioning, and integrations with tools such as SailPoint IdentityNow\n\nDefine and improve vulnerability discovery, risk-based prioritization, remediation tracking, and escalation processes; assess cloud misconfigurations, container images, infrastructure components, and third-party dependencies\n\nLeverage AWS Security Hub, GuardDuty, Config, CloudTrail, IAM Access Analyzer, and CSPM tools to improve visibility and controls; support security incident investigations and follow-up preventive measures\n\nEmbed security into infrastructure-as-code and CI/CD workflows using AWS CDK and GitHub Actions, including SAST, SCA, IaC and container scanning, and DAST where relevant\n\nSecure CI/CD identities, OIDC-based access, deployment permissions, secrets, and supply-chain controls; automate security checks, compliance evidence, reporting, and repeatable remediation\n\nDesign secure Snowflake access models, including roles, row-level security, masking, and sensitive-data protection; contribute security requirements to monitoring, incident response, backup, and disaster recovery designs\n\nRequirements\n\nDegree in Computer Science, Cybersecurity, or a related field, or equivalent experience\n\n7+ years of practical experience in AWS cloud security architecture and core security services\n\nDeep knowledge of IAM, identity federation, least-privilege design, and access governance\n\nBackground in vulnerability management, cloud security posture, threat modeling, and risk-based remediation\n\nHands-on expertise in IaC (AWS CDK, Terraform, or CloudFormation) and CI/CD security, preferably GitHub Actions\n\nUnderstanding of containers/Kubernetes, networking, and encryption, along with cloud security monitoring\n\nFamiliarity with ISO 27001, NIST, and GDPR, as well as enterprise security governance\n\nCapability to translate security policies into engineering solutions and collaborate effectively across teams\n\nEnglish proficiency at an Upper-Intermediate level (B2) or higher\n\nNice to have\n\nExperience with Snowflake security, data-access governance, and row-level security\n\nProficiency in SailPoint IdentityNow or similar identity governance platforms\n\nFamiliarity with security tooling such as Wiz, Prisma Cloud, and Snyk, as well as Trivy or Checkov\n\nBackground in pharma, healthcare, or another regulated industry, including knowledge of GxP/GAMP 5\n\nCertifications such as AWS Security Specialty, CISSP, CCSP, or CISM\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":5079,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-05T06:52:20Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":31,"reasons":["seen:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":96996,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-cloud-security-architect-aws-data-platforms","json_url":"https://alion.io/job/epam-systems-cloud-security-architect-aws-data-platforms.json","meta":{"generated_at":"2026-11-07T16:26:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23188,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-cloud-security-architect-aws-data-platforms"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-cloud-security-architect-aws-data-platforms"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-cloud-security-architect-aws-data-platforms"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-cloud-security-architect-aws-data-platforms\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-cloud-security-architect-aws-data-platforms"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3791739}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3791739},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}