Security Architect

We are hiring a Security Architect to support security architecture and operating model development across DB’s on-premise private cloud platforms. The role will be embedded within platform teams and will act as the key liaison between the platform teams and CSO capability SMEs, ensuring CSO security principles and requirements are captured, designed, and delivered.

The role may focus on BMaaS, VMaaS, CaaS, DBaaS, Storage/MaaS, or Common Control Plane/dbServiceNow, depending on demand and prioritization.

Responsibilities

• Act as the Security Architect for one or more private cloud platform areas, including BMaaS/VMaaS/CaaS, DBaaS/Storage/MaaS, or Common Control Plane/dbServiceNow
• Embed within platform teams to capture security requirements and drive delivery of CSO security principles
• Liaise with CSO capability SMEs across security pillars to ensure requirements are understood and implemented
• Produce and agree on security designs and operating models for private cloud platforms
• Develop delivery plans for implementation of security designs and operating models
• Guide delivery teams in implementing agreed security architecture and control requirements
• Support CSO Enterprise Security Architecture in developing a high-level reference security architecture for DB’s private cloud
• Define security requirements for on-premise service account management and privileged access management across private cloud platforms
• Support encryption requirements for data at rest across on-premise infrastructure, where relevant
• Capture CSO operating model requirements for ServiceNow and Common Control Plane capabilities, where relevant
• Support alignment of Secure SDLC governance processes across public and private cloud environments

Requirements

• Strong general security architecture experience across multiple security domains (10+ years)
• Experience designing security solutions for private cloud, on-premise infrastructure, or enterprise platform environments
• Experience with at least one of the following: Bare Metal as a Service/Virtual Machines as a Service/Containers as a Service/Database as a Service or Storage platforms or Messaging as a Service/Common Control Plane/Developer Portals/ ServiceNow
• Specialist experience in Identity & Authentication, data encryption, or secure software/systems development processes
• Familiarity with managed Kubernetes, virtualization platforms/SDDC, cloud and on-premise networking
• Experience with Terraform, Ansible, or other automation and infrastructure-as-code tools
• Understanding of privileged access management, service account management, and secure operating models
• Experience working with security stakeholders, enterprise architecture teams, platform teams, and engineering teams
• Ability to produce security designs, reference architectures, operating models, and delivery plans
• Experience with Secure SDLC governance, DevSecOps, or security controls integration into developer platforms is desirable
• Excellent written and verbal communication skills in English (C1 level)

Benefits

• Opportunity to work in a fast-paced, agile, software engineering culture
• Comfortable modern office in Prague 7, with support of hybrid or fully remote mode
• Benefit program (5 weeks of vacation, paid sick days, paid days off for special occasions, meal vouchers, flexi pass, Prague city public transport annual coupon, multisport cards, optional contribution to pension fund, health insurance for family member)
• EPAM Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements)
• English language courses
• Czech language courses upon request
• Referral bonuses for recommended candidates
• Mobile Phone Tariff’s program for managerial-level candidates
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more

• Opportunity to work in a fast-paced, agile, software engineering culture
• Benefit program (5 weeks of vacation, 5 paid sick days, meal vouchers, cafeteria and recreation bonuses, reimbursement of glasses, contribution to pension fund)
• Referral bonuses for recommended candidates
• English language courses
• Great learning and development opportunities, including in-house professional training, career advisory and coaching, sponsored professional certifications, well-being programs, LinkedIn Learning Solutions and much more