Lavora.

Back to search

Lead AWS IAM Security Engineer

EPAM Systems

Location
New York, US
Workplace
On-site
Job type
Full-time
Salary
$65k–$102k
Posted
3 weeks ago
Source
DevITJobs
Apply on company site

Requirements:

  • Strong hands-on experience with AWS CDK and TypeScript for security-as-code automation
  • Deep expertise in AWS Private CA with HSM-backed architecture, ACM, mTLS trust stores, and automated certificate issuance, rotation, and revocation workflows
  • Proficiency with Amazon GuardDuty, Security Hub, AWS FSBP, CIS, NIST benchmarks, Macie, and IAM Access Analyzer
  • Experience supporting strict PCI-scoped fintech audits and CSPM frameworks
  • Advanced IAM knowledge covering roles, trust policies, permission boundaries, SCPs, IRSA, and EKS Pod Identity
  • Experience with Secrets Manager, External Secrets Operator, and KMS/MRK envelope encryption
  • Familiarity with SAST tooling such as SonarQube and CodeQL, Dependabot, and software supply chain security practices including image signing and provenance with Cosign and SLSA
  • Experience with Wiz as a CSPM/CNAPP platform
  • Advanced deployments of AWS Private CA and complex KMS key hierarchies

Responsibilities:

  • Design and enforce secure AWS IAM policies, roles, permission boundaries, SCPs, and EKS Pod Identity or IRSA configurations
  • Implement and operate security monitoring and posture management tools such as Amazon GuardDuty, AWS Security Hub, AWS CloudTrail, Macie, and IAM Access Analyzer
  • Build and manage automated certificate lifecycle workflows using AWS Private CA, ACM, and mTLS trust stores while coordinating closely with our security approval process
  • Protect sensitive data using AWS KMS, including Multi-Region Keys, Secrets Manager, and the External Secrets Operator

Technologies:

  • AWS
  • Cloud
  • HSM
  • IAM
  • Security
  • TypeScript
  • Architect

More

We are seeking a specialized Cloud Security Engineer to secure our next-generation multi-region architecture. In this role, we focus on architecting, implementing, and automating strong security controls across AWS, including enterprise IAM, PKI, secrets management, and cloud security posture management, while maintaining strict compliance for PCI-scoped fintech workloads.

last updated 43 week of 2026