EPAM Systems

Consultant - Network Security

Brak informacji o wynagrodzeniu

SeniorZdalnie·PoznańFull-time

#449495·Dodano miesiąc temu·1

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Network SecurityCheck PointPalo Alto NetworksPanoramaZscaler Internet AccessZscaler Private AccessCloudflareBGPTerraform

Podsumowanie oferty

The role of Consultant – Network Security involves designing, implementing, and operating secure network segmentation between regional environments and global networks. The position leverages technologies such as Check Point, Palo Alto Networks, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Cloudflare. It blends architecture, hands-on engineering, automation, and operational leadership to deliver policy-driven connectivity under strict regulatory and operational requirements.

Wymagania

Minimum 5 years of experience in network security architecture and operations focusing on cross-border or multi-region connectivity
Expertise with Check Point Security Gateways, Palo Alto Networks next-generation firewalls, and Panorama management
Proficiency in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for zero-trust architectures
Skills in Cloudflare Magic Transit/Magic WAN, WAF Management, and DDoS mitigation
Knowledge of cloud hybrid connectivity including Site-to-Site VPN, Cloud Interconnect, and BGP routing
Background in SD-WAN, MPLS, and SASE architectures with policy-based routing and encryption protocols
Understanding of regulatory and compliance frameworks for data residency, TLS inspection, and lawful intercept
Familiarity with SIEM platforms and telemetry normalization for security monitoring
Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD integration
Capability to lead L3/L4 incident response and conduct root cause analysis with corrective action planning

Obowiązki

Define trust zones, routing boundaries, and inter-zone controls for regional and global networks including micro-segmentation and cross-border allow-lists
Produce HLD/LLD, threat models, and control mappings aligned to standards and regulations
Design and operate dual-vendor firewall perimeters with high availability, failover, NAT domain strategy, SSL/TLS inspection governance, and tuned Threat Prevention including WildFire and URL filtering
Engineer Zscaler Internet Access (ZIA) for identity-aware egress controls, SSL inspection, inline CASB/DLP, and SaaS governance
Implement Zscaler Private Access (ZPA) for zero-trust per-application access with connector placement and posture checks
Design and deliver Site-to-Site VPN (IPSec), Cloud Interconnect, and BGP-based dual-tunnel HA for cloud hybrid connectivity
Deploy Cloudflare Magic Transit/Magic WAN, WAF Management, and rate limiting; integrate with on-prem perimeters
Engineer SD-WAN/MPLS/SASE paths with policy-based routing, strong encryption, and key custody
Translate regulatory and internal requirements into enforceable controls for logging, data residency, TLS inspection, and lawful intercept
Normalize telemetry from firewall, Zscaler, and Cloudflare into SIEM with regional data handling rules
Lead L3/L4 incidents, coordinate containment, and drive root cause analyses with corrective actions
Manage firewall, Zscaler, and Cloudflare policies through Terraform, Ansible, and vendor APIs; implement CI/CD with policy linting and unit tests

Benefity

Opportunity to work remotely within Poland and hybrid work mode
Chance to work abroad up to 60 days annually
Business-driven relocation opportunities
Career development programs with mentoring, soft skills, and well-being initiatives
Certification programs (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay with Employee Stock Purchase Plan offering a 15% discount
Benefits package including health insurance, multisport, and shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment zones, table tennis, football, free snacks, and coffee
Corporate, social, and well-being events

Elastyczne godziny

Pakiet relokacyjny

Budżet konferencyjny

Kursy językowe

Opieka zdrowotna

Karta sportowa

Ubezpieczenie

Udział w zyskach

Premie

Darmowe przekąski

Napoje w biurze

Inne informacje

Benefits listed are available to employees only. Open for work with Contractors; B2B cooperation terms negotiated individually. Selected candidates will be contacted exclusively. Applicant data is processed by EPAM Systems (Poland) sp. z o.o. for recruitment purposes in accordance with the Privacy Policy.

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz