Lead Data Security Solution Engineer

We are seeking a Lead Data Security Solution Engineer to review requirements produced by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing.

The landscape is predominantly relational, with primary control at the data and database layer, emphasizing identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.

Responsibilities

• Review Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; assess relational database platforms, schemas, connectivity methods, query patterns, and identify where licensed data is stored, transformed, replicated, extracted, or backed up
• Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites
• Design authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; reduce reliance on shared or long-lived credentials
• Design database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logic
• Design database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; ensure audit records are searchable, protected, and useful for investigation
• Design controls for access revocation when users change roles or licensing rights expire; design methods to identify and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanisms
• Translate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; collaborate with database, IAM, security architecture, infrastructure, application, and governance teams
• Select database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendations

Requirements

• 5+ years of relevant experience, including at least 1 year in a leadership role
• Strong hands-on experience with relational databases, SQL, and database architecture, including schemas, roles, privileges, and access paths
• Practical experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanisms
• Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management
• Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines
• Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support
• Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications
• Ability to evaluate heterogeneous database technologies and design platform-appropriate controls
• Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills
• English proficiency at an Upper-Intermediate level (B2) or higher

Nice to have

• Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies
• Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environments
• Experience designing and executing security POCs and converting validated patterns into production-ready designs
• Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data

Benefits

We connect like-minded people

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Comprehensive medical & family care package
• Four trust days per year for personal needs
• Discounts for fitness clubs
• Benefits package (hotels, restaurants, stores and services)

We connect like-minded people

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Comprehensive medical & family care package
• Five trust days per year (sick leave without a medical certificate)
• Benefits package (sports activities, a variety of stores and services)

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers
• Discounts in local language schools, including online courses for the Kazakh language

We cover it all:

• Participation in the Employee Stock Purchase Plan
• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

We cover it all:

• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Six trust days per year (sick leave without a medical certificate)
• Coverage of psychology sessions of your choice
• Discounts for fitness clubs and sports programs
• Benefits package (sports activities, a variety of stores and services)

We connect like-minded people:

• Delivering innovative solutions to industry leaders, making a global impact
• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events

We invest in your growth:

• Leadership development, career advising, soft skills and well-being programs
• Certifications, including GCP, Azure and AWS
• Unlimited access to EPAM's internal learning database
• Free English classes with certified teachers

• Discounts in local language schools, including offline courses for the Uzbek language

We cover it all:

• Monetary bonuses for engaging in the referral program
• Medical & family care package
• Four trust days per year (sick leave without a medical certificate)
• Discounts for fitness clubs, dance schools and sports programs
• Benefits package (sports activities, a variety of stores and services)