Lead Platform Security Engineer

We are seeking a Lead Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments. Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office. Responsibilities Automate the hardening of golden images to meet Level 1 CIS benchmark requirementsBuild and maintain infrastructure as code pipelines using Jenkins, Terraform and ChefConfigure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systemsDevelop and manage AWS-based infrastructure to support secure image creationCreate and maintain Packer and Vagrant templates for golden image buildsApply Level 1 CIS benchmark standards across all supported platformsCollaborate with cross-functional teams to integrate security automation into existing workflowsTroubleshoot and resolve issues within the automation and hardening pipelineDocument processes and configurations related to image hardening and compliance Requirements 5+ years of experience in platform security engineering or a related fieldKnowledge of Level 1 CIS benchmarksProficiency in Jenkins, Terraform and Chef InfraExpertise in Amazon Web ServicesSkills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025English proficiency at B2 level or higher Nice to have Familiarity with HashiCorp Vagrant and PackerKnowledge of Wiz CSPM We offer Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more. Salary range €4.5K-€6.3K gross, based on your experience and interview results. EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.