Consultant - Network Security

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups with over thirty years of expertise in custom software, product, and platform engineering.

• Minimum 5 years of experience in network security architecture and operations focusing on cross-border or multi-region connectivity
• Expertise with Check Point Security Gateways, Palo Alto Networks next-generation firewalls, and Panorama management
• Proficiency in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for zero-trust architectures
• Skills in Cloudflare Magic Transit/Magic WAN, WAF Management, and DDoS mitigation
• Knowledge of cloud hybrid connectivity including Site-to-Site VPN, Cloud Interconnect, and BGP routing
• Background in SD-WAN, MPLS, and SASE architectures with policy-based routing and encryption protocols
• Understanding of regulatory and compliance frameworks for data residency, TLS inspection, and lawful intercept
• Familiarity with SIEM platforms and telemetry normalization for security monitoring
• Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD integration
• Capability to lead L3/L4 incident response and conduct root cause analysis with corrective action planning

• Define trust zones, routing boundaries, and inter-zone controls for regional and global networks including micro-segmentation and cross-border allow-lists
• Produce HLD/LLD, threat models, and control mappings aligned to standards and regulations
• Design and operate dual-vendor firewall perimeters with high availability, failover, NAT domain strategy, SSL/TLS inspection governance, and tuned Threat Prevention including WildFire and URL filtering
• Engineer Zscaler Internet Access (ZIA) for identity-aware egress controls, SSL inspection, inline CASB/DLP, and SaaS governance
• Implement Zscaler Private Access (ZPA) for zero-trust per-application access with connector placement and posture checks
• Design and deliver Site-to-Site VPN (IPSec), Cloud Interconnect, and BGP-based dual-tunnel HA for cloud hybrid connectivity
• Deploy Cloudflare Magic Transit/Magic WAN, WAF Management, and rate limiting; integrate with on-prem perimeters
• Engineer SD-WAN/MPLS/SASE paths with policy-based routing, strong encryption, and key custody
• Translate regulatory and internal requirements into enforceable controls for logging, data residency, TLS inspection, and lawful intercept
• Normalize telemetry from firewall, Zscaler, and Cloudflare into SIEM with regional data handling rules
• Lead L3/L4 incidents, coordinate containment, and drive root cause analyses with corrective actions
• Manage firewall, Zscaler, and Cloudflare policies through Terraform, Ansible, and vendor APIs; implement CI/CD with policy linting and unit tests

Benefits listed are available to employees only. Open for work with Contractors; B2B cooperation terms negotiated individually. Selected candidates will be contacted exclusively. Applicant data is processed by EPAM Systems (Poland) sp. z o.o. for recruitment purposes in accordance with the Privacy Policy.