Senior DevSecOps Engineer

We are seeking a Senior DevSecOps Engineer with strong experience in platform or infrastructure engineering and a solid foundation in application security. This role focuses on designing, building, and operating scalable enterprise platforms that enable seamless integration, orchestration, and management of SAST (Static Application Security Testing) tooling. You will work within cloud-native environments and Kubernetes, driving automation, improving developer experience, and ensuring secure, compliant, and reliable security tooling at scale.

Responsibilities

• Design, build, and maintain scalable platforms supporting enterprise SAST tooling
• Integrate security scanning capabilities into CI/CD pipelines to enable secure SDLC practices
• Develop and optimise platform architecture for performance, scalability, and reliability
• Automate deployment, configuration, and operational workflows using Infrastructure as Code
• Enable secure and efficient consumption of SAST services by engineering teams
• Implement platform hardening, including access control, secrets management, and compliance enforcement
• Ensure observability through logging, monitoring, and alerting for platform and scanning services
• Collaborate with engineering and security teams to improve developer enablement and security adoption
• Manage and operate cloud-native infrastructure and Kubernetes environments
• Support continuous improvement of platform capabilities, integrations, and automation frameworks

Requirements

• 3+ years of experience in platform engineering or infrastructure engineering
• Solid understanding of application security principles and secure SDLC practices
• Experience building or supporting platforms for security tooling, ideally SAST
• Hands-on experience with Cloud technologies and Kubernetes
• Proven experience integrating security tools into CI/CD pipelines
• Strong knowledge of Infrastructure as Code and automation tools such as Terraform or Helm
• Good scripting skills and strong troubleshooting and problem-solving capabilities
• Fluent English communication skills at a B2+ level

Nice to have

• Experience with GitHub Actions or similar CI/CD orchestration tools
• Knowledge of secrets management solutions (e.g., HashiCorp Vault or cloud-native alternatives)
• Experience with monitoring and observability tools (e.g., Prometheus, Grafana, Cloud Monitoring)
• Exposure to compliance frameworks and enterprise security requirements
• Experience with additional application security domains (e.g., DAST, SCA)
• Understanding of service integration patterns and platform engineering best practices

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.