Senior Security Systems Engineer (Azure Cloud)

About EPAM

EPAM is a leading global provider of digital platform engineering and development services. EPAM has been expanding in Singapore since 2013 and delivering the best solutions to our customers. As a recognized leader, EPAM Singapore achieved Great Place to Work Certification in 2023 and is committed to providing our team with inspiring careers.

You will have the opportunity to work with fellow talented technologists and accelerate your career by participating in our numerous upskilling, training, and certification programs. That is why EPAM Singapore was awarded Gold for Best In-House Certification Programmes in the Employee Experience Awards 2023 and Silver in the SkillsFuture Employers Awards 2022 for our efforts in championing employees' skills development and building a lifelong learning culture at the workplace. You can also look forward to developing holistically with the multiracial festivals and various wellness and cultural activities organized by our passionate colleagues here.

Why EPAM?

• By choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2022 & 2023.
• Employee ideas are the main driver of our business. We have a very supportive environment where your voice matters.
• You will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practices.
• We offer a transparent career path and an individual roadmap to engineer your future & accelerate your journey.
• At EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with us.

What You’ll Do

• Remediate cloud security, vulnerability and audit findings, tracking closure with evidence
• Harden Azure compute, storage, networking, key management and logging to agreed baselines
• Implement Azure Policy, tagging, governance guardrails, role-based access control (RBAC) and privileged access controls
• Build landing zone components including subscription and resource group structure, spoke virtual networks, subnets, route tables, network security groups, private endpoints and private Domain Name System (DNS)
• Configure hybrid connectivity including Azure VPN Gateway, Azure ExpressRoute, peering and firewall rules aligned to documented requirements
• Deliver repeatable builds using infrastructure as code and automation where practical
• Execute migration waves including assessment, data transfer, testing, cutover, rollback and cross-team coordination
• Produce as-built documentation, runbooks and structured knowledge transfer while following change management and Monetary Authority of Singapore (MAS) Technology Risk Management requirements

What Will Make You Shine

• Azure engineering delivery experience across remediation and migration in production environments
• Delivery to defined architecture including raising conflicts early and working within formal change control
• Azure platform skills across compute, storage, governance and resource management
• Azure networking skills including virtual networks, subnets, network security groups, route tables, private endpoints, private DNS, VPN Gateway and ExpressRoute
• Identity and secrets management using Microsoft Entra ID, RBAC, Privileged Identity Management (PIM), Azure Key Vault and managed identities
• Infrastructure as code and automation using Terraform or Bicep plus Azure Command-Line Interface (CLI) and PowerShell
• Migration tooling experience such as Azure Migrate, Azure Site Recovery and dependency mapping
• On-site availability in Singapore with ability to support planned out-of-hours cutovers plus background screening and third-party access requirements

Nice to Have

• Microsoft Defender for Cloud or broader cloud security tooling experience
• Azure Monitor and Azure Log Analytics experience, including alerting and cost visibility
• Azure certifications such as AZ-104, AZ-500, or AZ-700

How We Hire

Here, we summarize the typical journey to finding a job within EPAM:

• Apply and tell us about yourself

1. General interview with a recruiter
2. Technical interview with our technology experts
3. Manager interview or Offer interview with a hiring manager

• Get ready to join the team

Not sure if you meet all the requirements? No problem. Let’s talk anyway and find out more.

It takes 1 min of application to start the journey with us. Apply now!