Consultant - Network Security

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• 5+ years experience in network security architecture and operations with cross-border or multi-region connectivity
• Expertise in Check Point Security Gateways, Palo Alto Networks firewalls, and Panorama management
• Proficient with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
• Skills in Cloudflare Magic Transit/Magic WAN, WAF management, and DDoS mitigation
• Knowledge of hybrid cloud connectivity: Site-to-Site VPN, Cloud Interconnect, and BGP routing
• Experience with SD-WAN, MPLS, and SASE architectures including policy-based routing and encryption
• Understanding of regulatory and compliance for data residency, TLS inspection, and lawful intercept
• Familiarity with SIEM platforms and telemetry normalization
• Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD
• Capability to lead L3/L4 incident response and root cause analysis

• Define trust zones, routing boundaries, and inter-zone controls for regional and Global Network, including micro-segmentation and cross-border allow-lists
• Produce HLD/LLD, threat models, and control mappings aligned to standards and regulations
• Design and operate dual-vendor firewall perimeters with HA/cluster design, failover, NAT strategy, SSL/TLS inspection, and Threat Prevention
• Engineer ZIA for identity-aware egress controls, SSL inspection, CASB/DLP, and SaaS governance
• Implement ZPA for zero-trust per-application access with connectors, posture checks, and app segmentation
• Design and deliver Site-to-Site VPN, Cloud Interconnect, and BGP-based HA tunnels for hybrid connectivity
• Deploy Cloudflare Magic Transit/Magic WAN, WAF management, and rate limiting for internet services
• Engineer SD-WAN/MPLS/SASE paths with policy-based routing, encryption, and key management by jurisdiction
• Translate regulatory and internal control requirements into technical controls for logging, data residency, TLS inspection, lawful intercept
• Normalize telemetry from firewalls, Zscaler, and Cloudflare for SIEM with regional data handling and detection of anomalies
• Lead L3/L4 incidents, issue containment, and root cause analysis with corrective actions
• Manage firewall, Zscaler, and Cloudflare policies using Terraform, Ansible, and vendor APIs with CI/CD integration

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice