{"id":3309507,"url":"https://alion.io/job/epam-systems-network-security-architect-3","title":"Network Security Architect","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":45,"open_postings":58,"ghost_share":0.897,"stale_share":0,"repost_share":0.103,"time_to_fill_p50_days":44,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riga, Latvia"],"countries":["LV"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5500,"max":7200,"currency":"EUR","period":"month","gross":null,"usd_annual":96624},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Kubernetes","optional":false},{"name":"OpenShift","optional":false},{"name":"PCI DSS","optional":false},{"name":"PKI","optional":false},{"name":"Rest API","optional":false},{"name":"Service Mesh","optional":false},{"name":"CI/CD","optional":true},{"name":"SIEM","optional":true}],"status":"closed","first_seen_at":"2026-10-27T02:33:24Z","employer_posted_date":null,"last_verified_at":"2026-10-28T08:41:15Z","board_verified":false,"closed_at":"2026-10-28T08:41:15Z","days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Job Description\nWe are seeking a Network Security Architect to support a major digital transformation aimed at enhancing customer experience and modernizing operations within the banking sector. In this role, you will design and implement secure, resilient network solutions for digital banking initiatives.\n\nThis position offers hybrid setup with the flexibility to work from any location in Latvia, whether it's your home or our office in Riga.\n\nProduce (and guide teams producing) As-Is Security Architecture assessments, Target Security Architectures, and High-Level Security Design Documents and LLDs for major banking change programs\n\nDeliver security designs across REST APIs, Microservices, and eventing, batch, integration gateways, and secure data flows within highly regulated payments environments\n\nAssess solution designs created by Payments Architects, identify security gaps, evaluate risk, and recommend secure design patterns\n\nTrack and manage security design decisions, articulate risk-based options, and negotiate with Technology, Business and Risk stakeholders\n\nDig into technical details including protocols, data flows, infrastructure, APIs, application behaviours, and implementation constraints\n\nInfluence teams and stakeholders on secure-by-design principles through clear verbal and written communication\n\nSupport large banking transformation programs in a Security Architecture capacity\n\nSecure cloud, container, and hybrid platforms leveraging OpenShift, Kubernetes, and service mesh\n\nRequirements\n\n7+ years of experience in network security management\n\nKnowledge of Irish and European financial regulations, including PSD2/RTS SCA, SWIFT CSP, and PCI DSS\n\nUnderstanding of EBA guidelines and local regulators\n\nDeep expertise in core security standards and mechanisms, including OAUTH2, OIDC, and SAML2\n\nProficiency in MTLS/PKI, encryption, and tokenisation\n\nFamiliarity with HSMs, secrets management, network zoning, and firewall rules\n\nBackground in large banking transformation programs in a Security Architecture role\n\nSkills in securing cloud, container, and hybrid platforms (OpenShift, Kubernetes, service mesh)\n\nRelevant architecture certification (SABSA preferred, TOGAF or equivalent acceptable)\n\nExcellent command of written and spoken English (B2+ level)\n\nNice to have\n\nSecurity oversight or design experience on payment engines/platforms (FIS, ACI, Temenos, Finastra, etc.)\n\nFull-stack or application engineering background prior to moving into Security Architecture\n\nCapability to define Infrastructure Security Architectures for high availability, resilience, and operational risk controls (WAF, DDoS, SIEM)\n\nExperience designing secure data architectures, data classifications, key entity protection, and secure migration approaches\n\nExposure to DevSecOps practices, CI/CD security tooling, and software supply chain protections\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.\n\nHybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.","description_format":"text","description_chars":3979,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-27T02:43:38Z"},{"event":"close","at":"2026-10-28T08:41:15Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":96624,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-network-security-architect-3","json_url":"https://alion.io/job/epam-systems-network-security-architect-3.json","meta":{"generated_at":"2026-10-28T23:10:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31673,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-network-security-architect-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-network-security-architect-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-network-security-architect-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-network-security-architect-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-network-security-architect-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3309507}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3309507},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}