Lead Platform Security Engineer

We are seeking a Lead Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments.

Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office.

Responsibilities

• Automate the hardening of golden images to meet Level 1 CIS benchmark requirements
• Build and maintain infrastructure as code pipelines using Jenkins, Terraform and Chef
• Configure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systems
• Develop and manage AWS-based infrastructure to support secure image creation
• Create and maintain Packer and Vagrant templates for golden image builds
• Apply Level 1 CIS benchmark standards across all supported platforms
• Collaborate with cross-functional teams to integrate security automation into existing workflows
• Troubleshoot and resolve issues within the automation and hardening pipeline
• Document processes and configurations related to image hardening and compliance

Requirements

• 5+ years of experience in platform security engineering or a related field
• Knowledge of Level 1 CIS benchmarks
• Proficiency in Jenkins, Terraform and Chef Infra
• Expertise in Amazon Web Services
• Skills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025
• English proficiency at B2 level or higher

Nice to have

• Familiarity with HashiCorp Vagrant and Packer
• Knowledge of Wiz CSPM

We offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.
• Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.

Salary range €4.5K-€6.3K gross, based on your experience and interview results.

EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.