Lead Data Security Solution Engineer

We are looking for a Lead Data Security Solution Engineer to examine requirements created by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing.

The environment is largely relational, with primary enforcement at the data and database layer, focusing on identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.

Responsibilities

• Examine Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; evaluate relational database platforms, schemas, connectivity methods, query patterns, and pinpoint where licensed data is stored, transformed, replicated, extracted, or backed up
• Evaluate current database security capabilities and pinpoint gaps, constraints, risks, and prerequisites
• Design authentication for named users, service identities, workloads, and analytical tools connecting to databases; assess OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; minimize reliance on shared or long-lived credentials
• Build database-level controls limiting access to authorized users, groups, services, or licensing populations; apply row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logic
• Create database auditing that captures who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; make audit records searchable, protected, and useful for investigation
• Build controls for access revocation when users change roles or licensing rights expire; design methods to locate and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanisms
• Convert requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; partner with database, IAM, security architecture, infrastructure, application, and governance teams
• Choose database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendations

Requirements

• 5+ years of relevant experience, including at least 1 year in a leadership role
• Hands-on background in relational databases, SQL, and database architecture, including schemas, roles, privileges, and access paths
• Practical expertise in database-level authorization, including row-level and column-level controls or fine-grained mechanisms
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management
• Background in designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines
• Proficiency in database auditing, query/activity monitoring, centralized logging, alerting, and investigation support
• Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications
• Capability to assess heterogeneous database technologies and design platform-appropriate controls
• Skills in architecture, engineering, troubleshooting, documentation, and stakeholder collaboration
• English proficiency at an Upper-Intermediate level (B2) or higher

Nice to have

• Familiarity with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies
• Background in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environments
• Expertise in designing and running security POCs and turning validated patterns into production-ready designs
• Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements that apply to licensed data

We offer

CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT

• Diversity of tasks and projects
• Assessment center for objective review of competency level
• Personal development plan
• Mentoring programs and leadership development
• Certification and professional development support 
• Access to learning platforms including more than 2,500 internal courses
• English courses taught by certified teachers

CORPORATE BENEFITS

• Extra leave days
• Referral bonuses

COMPENSATION PACKAGE

• Competitive compensation paid in USD
• Regular salary and performance reviews

MEDICAL & HEALTHCARE

• Private health insurance
• Well-being events

WORKING ENVIRONMENT

• Recreation areas and kitchens
• Tea, coffee and snacks
• Sports equipment and game consoles
• IT Equipment
• Microsoft’s Software Assurance Home Use Program (HUP)

Please note that our Talent Attraction Team reviews applications and CVs submitted in English.

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

Remote in Türkiye