Consultant - Network Security

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, EPAM empowers clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• 5+ years experience in network security architecture and operations with cross-border or multi-region connectivity
• Expertise in Check Point Security Gateways, Palo Alto Networks firewalls, and Panorama management
• Proficiency in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) zero-trust architecture
• Skills in Cloudflare Magic Transit/Magic WAN, WAF Management, and DDoS mitigation
• Knowledge of cloud hybrid connectivity including Site-to-Site VPN, Cloud Interconnect, and BGP routing
• Background in SD-WAN, MPLS, and SASE architectures with policy routing and strong encryption
• Understanding of regulatory and compliance frameworks for data residency, TLS inspection, and lawful intercept
• Familiarity with SIEM platforms and telemetry normalization
• Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD integration
• Capability to lead L3/L4 incident response and root cause analysis with corrective action planning

• Define trust zones, routing boundaries, and inter-zone controls for regional and Global Network, including micro-segmentation and cross-border allow-lists
• Produce HLD/LLD, threat models, and control mappings aligned with internal standards and regulations
• Design and operate dual-vendor firewall perimeters with HA/cluster design, NAT domain strategy, and SSL/TLS inspection governance
• Engineer Zscaler Internet Access for identity-aware egress controls and inline CASB/DLP
• Implement Zscaler Private Access for zero-trust per-application access
• Design and deliver Site-to-Site VPN (IPsec), Cloud Interconnects, and BGP-based dual-tunnel HA for hybrid cloud connectivity
• Deploy Cloudflare Magic Transit/Magic WAN, WAF Management, and rate limiting integrated with on-prem perimeters
• Engineer SD-WAN/MPLS/SASE paths with policy routing and encryption
• Translate regulatory and internal control requirements into technical controls for logging, data residency, and TLS inspection
• Normalize telemetry from firewall, Zscaler, and Cloudflare into SIEM and build detections for anomalies
• Lead L3/L4 incident response, containment, and RCA with corrective actions
• Manage policies through Terraform/Ansible and vendor APIs, implementing CI/CD with linting and unit tests

By applying, candidates consent to personal data processing by EPAM Systems (Poland) sp. z o.o. in accordance with their Privacy Policy. Benefits listed are only for employees. EPAM is open to working with contractors under individually agreed B2B agreements. Selected candidates will be contacted exclusively.