{"id":3309508,"url":"https://alion.io/job/epam-systems-senior-security-engineer","title":"Senior Security Engineer","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":52,"open_postings":70,"ghost_share":0.743,"stale_share":0,"repost_share":0.2,"time_to_fill_p50_days":44,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Riga, Latvia"],"countries":["LV"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3200,"max":5000,"currency":"EUR","period":"month","gross":null,"usd_annual":66876},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true}],"status":"closed","first_seen_at":"2026-10-27T02:33:19Z","employer_posted_date":null,"last_verified_at":"2026-10-31T08:44:41Z","board_verified":false,"closed_at":"2026-10-31T08:44:41Z","days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Description\nWe are seeking a Senior Security Engineer to join an Active Directory Hygiene Initiative, focused on remediating security, configuration, and architectural issues within the Active Directory environment. In this role, you will work closely with Security Engineering and Infrastructure teams to analyze, design, improve, and secure the Active Directory environment, ensuring alignment with modern security, compliance, and operational standards.\n\n_This position offers hybrid setup with the flexibility to work from any location in Latvia, whether it's your home or our office in Riga._\n\nAnalyze, design, and improve the Active Directory environment to align with modern security and operational standards\n\nRemediate security, configuration, and architectural issues within the existing Active Directory infrastructure\n\nImplement Active Directory security hardening measures, including Tiering, ESAE/Red Forest, and PAM\n\nDesign and govern forest, domain, and Group Policy structures\n\nManage Active Directory replication, DNS architecture, and hybrid integration with Microsoft Entra ID\n\nSupport identity and access management processes, including ADFS and Kerberos authentication flows\n\nDevelop PowerShell automation and scripting to streamline operational tasks\n\nPlan and execute Active Directory migration, consolidation (ADMT), disaster recovery, and backup/restore activities\n\nEnsure auditing and compliance alignment with NIST and DORA frameworks\n\nCollaborate with security, architecture, and infrastructure stakeholders on large-scale enterprise initiatives\n\nRequirements\n\n3+ years of proven experience as a Security Engineer working in large-scale enterprise environments\n\nExpertise in Active Directory architecture, design, forest and domain management\n\nProficiency in Active Directory security hardening (Tiering, ESAE/Red Forest, PAM)\n\nBackground in Identity & Access Management, Microsoft Entra ID hybrid integration, and ADFS\n\nSkills in Group Policy design and governance, Active Directory replication, and DNS architecture\n\nKnowledge of PKI / AD Certificate Services integration, Kerberos, and authentication flows\n\nCompetency in PowerShell automation and scripting\n\nFamiliarity with Active Directory disaster recovery, backup/restore, and migration/consolidation using ADMT\n\nUnderstanding of auditing and compliance frameworks (NIST, DORA)\n\nSolid networking fundamentals paired with strong troubleshooting, analytical, and problem-solving skills\n\nExcellent communication skills and ability to collaborate with security, architecture, and infrastructure stakeholders\n\nFluent English, both spoken and written (B2+ level)\n\nNice to have\n\nExpertise in Microsoft Azure / Entra ID\n\nExperience with AWS\n\nBackground in the banking or financial services industry\n\nFamiliarity with RDFS\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.\n\nHybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.","description_format":"text","description_chars":3911,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-27T02:43:38Z"},{"event":"close","at":"2026-10-28T08:41:15Z"},{"event":"reopen","at":"2026-10-29T02:41:15Z"},{"event":"close","at":"2026-10-31T08:44:41Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":66876,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-senior-security-engineer","json_url":"https://alion.io/job/epam-systems-senior-security-engineer.json","meta":{"generated_at":"2026-11-02T01:38:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2550,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-senior-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3309508}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3309508},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}