Azure AI Security Engineer

About the role

EPAM is looking for an experienced Azure AI Security Engineer to lead the design and implementation of secure Azure and Microsoft cloud architectures at enterprise scale. The role is fully remote within Armenia and involves using AI‑powered tools to automate security operations.

Key responsibilities

• Provide technical leadership and subject‑matter expertise for Azure, Microsoft 365, Entra ID and hybrid/multi‑cloud environments.
• Design, implement and continuously improve security controls across CSPM, IAM, PAM, DLP, Microsoft Defender, SIEM/SOAR, Zero Trust, DevSecOps and secure cloud landing zones.
• Develop automation scripts and workflows using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL and REST APIs.
• Integrate AI agents and AI‑assisted automations to triage findings, enrich alerts, support incident investigations and generate security documentation.
• Collaborate with engineering, DevOps, compliance and operations teams to embed security throughout the delivery lifecycle.
• Define guardrails for secure AI adoption, covering data protection, access control, prompt security and model governance.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field, or equivalent practical experience.
• Hands‑on experience with Microsoft Azure services and a strong understanding of cloud security concepts at enterprise scale.
• Proven experience with Microsoft security technologies (Entra ID/Azure AD, Defender for Cloud, Defender XDR, Sentinel, Purview, Intune).
• Ability to work closely with developers, architects, QA engineers and operations teams and to follow defined security processes.

Required skills

• Azure, Microsoft 365, Entra ID, Azure AD, Azure Policy, Key Vault, Azure Monitor/Log Analytics.
• Security tooling: Microsoft Sentinel, Microsoft Defender for Cloud, Microsoft Purview, Microsoft Intune.
• Scripting/automation: PowerShell, Python, Azure CLI, Terraform, Bicep, Logic Apps, Azure Functions, KQL.
• AI‑assisted automation: experience building or configuring AI agents, prompt engineering, integrating LLMs with tools/APIs.
• Knowledge of Zero Trust, Conditional Access, Identity Protection, Privileged Identity Management.

What we offer

• Fully remote work from any location in Armenia.
• Access to EPAM’s internal learning platform, certifications (Azure, GCP, AWS) and free English classes.
• Leadership development, career advising, soft‑skills and well‑being programs.
• Employee Stock Purchase Plan, referral bonuses, comprehensive medical & family care.
• Four trust days per year, fitness‑club discounts and other employee benefits.