Lead Data Security Solution Engineer

We are seeking a Lead Data Security Solution Engineer to review requirements produced by the Business Analyst and design, validate, and prototype secure technical solutions for BR Data In-Licensing.The landscape is predominantly relational, with primary control at the data and database layer, emphasizing identity-based authentication, fine-grained authorization, data firewalling, auditability, lifecycle control, and defensible deletion.Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.ResponsibilitiesReview Data In-Licensing requirements, workflow maps, data flows, entitlement rules, and dependency records; assess relational database platforms, schemas, connectivity methods, query patterns, and identify where licensed data is stored, transformed, replicated, extracted, or backed upAssess current database security capabilities and identify gaps, constraints, risks, and prerequisitesDesign authentication for named users, service identities, workloads, and analytical tools accessing databases; evaluate OAuth/OIDC or token-based authentication; integrate enterprise identities, security groups, and database principals; reduce reliance on shared or long-lived credentialsDesign database-level controls restricting access to authorized users, groups, services, or licensing populations; implement row-level security, column-level security, dynamic masking, views, or policy-based filtering; ensure controls are enforced at the data layer, not solely dependent on application logicDesign database auditing capturing who accessed data, what, when, and which identity was used; define logging for queries, exports, failed attempts, and permission changes; integrate audit telemetry with monitoring and reporting; ensure audit records are searchable, protected, and useful for investigationDesign controls for access revocation when users change roles or licensing rights expire; design methods to identify and remove licensed data from primary stores and downstream copies; address deletion implications for backups, archives, replication, and referential integrity; define validation and evidence mechanismsTranslate requirements into architectures, technical specifications, and implementation plans; compare solution options across security, feasibility, performance, scalability, and cost; collaborate with database, IAM, security architecture, infrastructure, application, and governance teamsSelect database and workflow candidates for POC; define POC architecture, test data, success criteria, and rollback approach; implement and validate authentication, fine-grained authorization, auditing, revocation, and deletion scenarios; document outcomes, limitations, and recommendationsRequirements5+ years of relevant experience, including at least 1 year in a leadership roleStrong hands-on experience with relational databases, SQL, and database architecture, including schemas, roles, privileges, and access pathsPractical experience implementing database-level authorization, including row-level and column-level controls or fine-grained mechanismsStrong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets managementExperience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelinesExperience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation supportUnderstanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implicationsAbility to evaluate heterogeneous database technologies and design platform-appropriate controlsStrong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skillsEnglish proficiency at an Upper-Intermediate level (B2) or higherNice to haveExperience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologiesExperience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or regulated environmentsExperience designing and executing security POCs and converting validated patterns into production-ready designsKnowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed dataWe offerWe connect like-minded peopleDelivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growthLeadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it allParticipation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programComprehensive medical & family care packageFive trust days per year (sick leave without a medical certificate)Benefits package (sports activities, a variety of stores and services)EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.