[Hiring] Lead Data Security Solution Engineer @EPAM Systems

Role Description

We are seeking a Lead Data Security Solution Engineer to review requirements produced by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing. The landscape is predominantly relational, with primary control at the data and database layer, emphasizing identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.

• Review Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records.
• Assess relational database platforms, schemas, connectivity methods, query patterns, and identify where licensed data is stored, transformed, replicated, extracted, or backed up.
• Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.
• Design authentication for named users, service identities, workloads, and analytical tools accessing databases.
• Evaluate OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; reduce reliance on shared or long-lived credentials.
• Design database-level controls restricting access to authorized users, groups, services, or licensing populations.
• Implement row-level security, column-level security, dynamic masking, views, or policy-based filtering.
• Ensure controls are enforced at the data layer, not solely dependent on application logic.
• Design database auditing capturing who accessed data, what, when, and which identity was used.
• Define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting.
• Ensure audit records are searchable, protected, and useful for investigation.
• Design controls for access revocation when users change roles or licensing rights expire.
• Design methods to identify and remove licensed data from primary stores and downstream copies.
• Address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanisms.
• Translate requirements into architectures, technical specifications, and implementation plans.
• Compare solution options across security, feasibility, performance, scalability, and cost.
• Collaborate with database, IAM, security architecture, infrastructure, application, and governance teams.
• Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach.
• Implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios.
• Document outcomes, limitations, and recommendations.

Qualifications

• 5+ years of relevant experience, including at least 1 year in a leadership role.
• Strong hands-on experience with relational databases, SQL, and database architecture, including schemas, roles, privileges, and access paths.
• Practical experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms.
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.
• Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines.
• Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.
• Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications.
• Ability to evaluate heterogeneous database technologies and design platform-appropriate controls.
• Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills.
• English proficiency at an Upper-Intermediate level (B2) or higher.

Nice to have

• Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies.
• Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environments.
• Experience designing and executing security POCs and converting validated patterns into production-ready designs.
• Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data.