Vacancy catalog
EPAM
Open role

Senior Solution Architect - Azure Platform & Product Security

EPAMEindhoven, Netherlands
Work model
Hybrid
Experience
5+ years
Employment
Not specified
Compensation
Not disclosed
Technology signal
15 tags

Technology context

15

Parsed from the vacancy text; ordered by relevance to this role.

AIAzureKubernetesCloud NativeCloudReliability EngineeringScalabilitySoftware ArchitectureAPIAPIs and IntegrationAzure BaseCryptographyRequirements AnalysisSecurity ArchitectureSoftware Architecture management

Full listing

Role description

We're looking for a Senior Solution Architect - Azure Platform & Product Security to join our team in Eindhoven, Netherlands, in a hybrid working mode.

We are seeking a hands-on Solution Architect with strong expertise in Microsoft Azure, cloud-native platforms and enterprise integration to own the architecture of a Product Security platform operating in a regulated manufacturing domain. The platform issues and manages digital identities, certificates, secrets and keys for factory equipment, ensuring secure integrations and privileged-access control.

The role focuses primarily on Azure platform and product architecture while applying security knowledge to build a scalable, resilient and secure solution. You will lead the evolution of the platform from active build into operational stability, reliability and ongoing enhancements , ensuring alignment across technical and business stakeholders.

Security expertise is important - especially in identity, PKI, secrets management and encryption - but this is not a pure Security Architect role . The ideal candidate combines cloud-native architecture, platform ownership and consultative communication skills to guide engineering decisions, drive dependencies and deliver a robust enterprise solution.

Responsibilities

  • Own end-to-end architecture for an Azure-based Product Security platform, defining design principles for evolution from build to run and enhancement phases
  • Design architecture for Kubernetes-based components, private networking, APIs, integrations, observability, security controls and reliability patterns
  • Guide teams on Azure, Kubernetes, integration and API design, deployment approaches and operational readiness
  • Apply security expertise in identity and access, PKI/certificates, secrets and key management, privileged access and encryption fundamentals
  • Oversee resilience architecture, including availability, DR and business continuity across internal and external dependencies
  • Facilitate requirements elicitation and translate ambiguous asks into clear specs and actionable architecture decisions
  • Drive cross-team coordination and resolve dependencies proactively with infrastructure, identity, security and delivery stakeholders
  • Communicate architecture decisions effectively: business impact and risk for leadership, technical trade-offs for engineers
  • Support broader account initiatives such as CMDB integration, platform modernization and security architecture improvements

Requirements

  • 5+ years in solution or platform architecture, cloud engineering or enterprise application architecture roles
  • Strong Microsoft Azure architecture expertise, including network design, platform scaling, cloud-native workloads and enterprise integration patterns
  • Practical experience with Kubernetes-based platforms, containerized workloads and operational reliability design
  • Proven ability to design APIs and integrations across enterprise systems (e.g., identity, certificate management, ITSM, operational systems)
  • Solid understanding of security architecture fundamentals including IAM, PKI, secrets and key management, privileged access and encryption patterns
  • Ownership of reliability, availability and DR strategies for complex solutions
  • Strong facilitation and consultative communication skills - able to align business and technical stakeholders
  • Ability to operate independently and drive architectural decisions without waiting for prescriptive guidance

Nice to have

  • Experience with enterprise identity and certificate management tooling (Okta, SailPoint, PKI platforms, HSMs)
  • Awareness of security regulations and standards (NIS2, Cyber Resilience Act, IEC 62443, ISO 27001)
  • Familiarity with observability practices, SIEM tools and operational dashboards
  • Broader IT architecture experience (CMDB, ITSM, platform modernization, service integration)
  • Exposure to AI-enabled delivery models such as GitHub Copilot or Azure AI services
  • Experience in Operational Technology environments, manufacturing and product security platforms