Consultant - Network Security

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and startups. The company has over thirty years of expertise in custom software, product and platform engineering, empowering clients to become AI-Native enterprises.

• 5+ years of experience in network security architecture and operations with cross-border or multi-region connectivity
• Expertise in Check Point Security Gateways, Palo Alto Networks firewalls, and Panorama management
• Proficiency in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for zero-trust architecture
• Experience with Cloudflare Magic Transit/Magic WAN, WAF management, and DDoS mitigation
• Knowledge of cloud hybrid connectivity including Site-to-Site VPN, Cloud Interconnect, and BGP routing
• Background in SD-WAN, MPLS, and SASE architectures with policy-based routing and strong encryption
• Understanding of regulatory and compliance frameworks for data residency, TLS inspection, and lawful intercept
• Familiarity with SIEM platforms and telemetry normalization
• Competency with Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD pipelines
• Ability to lead L3/L4 incident response and conduct root cause analysis with corrective actions

• Define trust zones, routing boundaries, and inter-zone controls for regional and Global Network including micro-segmentation and cross-border allow-lists
• Produce HLD/LLD, threat models, and control mappings aligned to standards and regulations
• Design and operate dual-vendor firewall perimeters with HA, failover, NAT, SSL/TLS inspection, and threat prevention
• Engineer and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for identity-aware egress and zero-trust access
• Implement Site-to-Site VPN (IPSec), Cloud Interconnect, and BGP-based dual-tunnel HA for hybrid cloud connectivity
• Deploy Cloudflare Magic Transit/WAN, WAF, and rate limiting integrated with on-prem perimeters
• Engineer SD-WAN/MPLS/SASE with policy-based routing and encryption
• Translate regulatory and internal control requirements into enforceable controls for logging, TLS inspection, and lawful intercept
• Normalize telemetry from firewall, Zscaler, and Cloudflare platforms into SIEM with regional rules and anomaly detection
• Lead L3/L4 incident response and root cause analyses
• Manage policies through Terraform, Ansible, and vendor APIs with CI/CD and policy linting

By applying, candidates agree to personal data processing by EPAM Systems (Poland) sp. z o.o. for recruitment purposes as per the privacy policy. Benefits listed are available to employees only. Cooperation with contractors under B2B agreements is possible with terms agreed individually. Only selected candidates will be contacted.