DontApply.Club
Login Register

Lead Platform Security Engineer

Epam Systems — Latvia · Posted ~21 hours ago

Lead Remote Visa History ✓

Skills

platform security CIS benchmarks infrastructure as code Jenkins Terraform Chef Windows Group Policy AWS Packer Vagrant security automation Windows Server CIS Benchmarks

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary

Lead security automation for cloud and on-premises platforms by hardening standardized machine images against Level 1 security benchmarks. You will build infrastructure-as-code pipelines, manage Windows security policies, operate cloud infrastructure, maintain image-building templates, and integrate security controls into engineering workflows.

Highlights

Work remotely from anywhere in Latvia on cloud and on-premises platform security. The role focuses on security automation, hardened golden images, infrastructure as code, and industry-standard CIS benchmarks.

Description

We are seeking a Lead Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments. Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office. Responsibilities Automate the hardening of golden images to meet Level 1 CIS benchmark requirementsBuild and maintain infrastructure as code pipelines using Jenkins, Terraform and ChefConfigure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systemsDevelop and manage AWS-based infrastructure to support secure image creationCreate and maintain Packer and Vagrant templates for golden image buildsApply Level 1 CIS benchmark standards across all supported platformsCollaborate with cross-functional teams to integrate security automation into existing workflowsTroubleshoot and resolve issues within the automation and hardening pipelineDocument processes and configurations related to image hardening and compliance Requirements 5+ years of experience in platform security engineering or a related fieldKnowledge of Level 1 CIS benchmarksProficiency in Jenkins, Terraform and Chef InfraExpertise in Amazon Web ServicesSkills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025English proficiency at B2 level or higher Nice to have Familiarity with HashiCorp Vagrant and PackerKnowledge of Wiz CSPM We offer Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more. Salary range €4.5K-€6.3K gross, based on your experience and interview results. EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.