EPAM Systems

Consultant - Network Security

Brak informacji o wynagrodzeniu

SeniorZdalnie·KatowiceFull-time

#449494·Dodano miesiąc temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Network SecurityCheck PointPalo Alto NetworksZscaler Internet AccessZscaler Private AccessCloudflareBGPTerraform

Podsumowanie oferty

The Consultant - Network Security role involves designing, implementing, and operating secure network segmentation between regional environments and Global networks. The role uses a standardized control stack including Check Point, Palo Alto Networks, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Cloudflare. Responsibilities include architecture, engineering, automation, and operational leadership to deliver policy-driven connectivity under regulatory requirements.

Wymagania

5+ years experience in network security architecture and operations with cross-border or multi-region connectivity
Expertise in Check Point Security Gateways, Palo Alto Networks firewalls, and Panorama management
Proficient with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA)
Skills in Cloudflare Magic Transit/Magic WAN, WAF management, and DDoS mitigation
Knowledge of hybrid cloud connectivity: Site-to-Site VPN, Cloud Interconnect, and BGP routing
Experience with SD-WAN, MPLS, and SASE architectures including policy-based routing and encryption
Understanding of regulatory and compliance for data residency, TLS inspection, and lawful intercept
Familiarity with SIEM platforms and telemetry normalization
Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD
Capability to lead L3/L4 incident response and root cause analysis

Obowiązki

Define trust zones, routing boundaries, and inter-zone controls for regional and Global Network, including micro-segmentation and cross-border allow-lists
Produce HLD/LLD, threat models, and control mappings aligned to standards and regulations
Design and operate dual-vendor firewall perimeters with HA/cluster design, failover, NAT strategy, SSL/TLS inspection, and Threat Prevention
Engineer ZIA for identity-aware egress controls, SSL inspection, CASB/DLP, and SaaS governance
Implement ZPA for zero-trust per-application access with connectors, posture checks, and app segmentation
Design and deliver Site-to-Site VPN, Cloud Interconnect, and BGP-based HA tunnels for hybrid connectivity
Deploy Cloudflare Magic Transit/Magic WAN, WAF management, and rate limiting for internet services
Engineer SD-WAN/MPLS/SASE paths with policy-based routing, encryption, and key management by jurisdiction
Translate regulatory and internal control requirements into technical controls for logging, data residency, TLS inspection, lawful intercept
Normalize telemetry from firewalls, Zscaler, and Cloudflare for SIEM with regional data handling and detection of anomalies
Lead L3/L4 incidents, issue containment, and root cause analysis with corrective actions
Manage firewall, Zscaler, and Cloudflare policies using Terraform, Ansible, and vendor APIs with CI/CD integration

Benefity

Hybrid work mode with opportunity to work remotely within Poland
Chance to work abroad up to 60 days annually
Business-driven relocation opportunities
Career development programs, mentoring, and soft skills workshops
Certification support (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay and participation in Employee Stock Purchase Plan with 15% discount
Benefits package including health insurance, multisport, shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment zones, table tennis, free snacks and coffee
Corporate, social, and well-being events

Elastyczne godziny

Opieka zdrowotna

Karta sportowa

Płatny urlop

Dofinansowanie szkoleń

Budżet konferencyjny

Kursy językowe

Udziały pracownicze

Premie

Darmowe przekąski

Napoje w biurze

Spotkania integracyjne

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz