EPAM Systems

Consultant - Network Security

Brak informacji o wynagrodzeniu

SeniorZdalnie·GdańskFull-time

#449496·Dodano miesiąc temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Check PointPalo Alto NetworksZscaler Internet AccessZscaler Private AccessCloudflareIPsecBGPTerraformSD‑WANAnsible

Podsumowanie oferty

The Consultant - Network Security is responsible for designing, implementing, and operating secure, compliant network segmentation between regional environments and Global networks. This role focuses on architecture, hands-on engineering, automation, and L3/L4 operational leadership using technologies like Check Point Security Gateways, Palo Alto Networks, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Cloudflare. The primary purpose is to deliver policy-driven connectivity under strict regulatory and operational requirements.

Wymagania

5+ years experience in network security architecture and operations with cross-border or multi-region connectivity
Expertise in Check Point Security Gateways, Palo Alto Networks firewalls, and Panorama management
Proficiency in Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) zero-trust architecture
Skills in Cloudflare Magic Transit/Magic WAN, WAF Management, and DDoS mitigation
Knowledge of cloud hybrid connectivity including Site-to-Site VPN, Cloud Interconnect, and BGP routing
Background in SD-WAN, MPLS, and SASE architectures with policy routing and strong encryption
Understanding of regulatory and compliance frameworks for data residency, TLS inspection, and lawful intercept
Familiarity with SIEM platforms and telemetry normalization
Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD integration
Capability to lead L3/L4 incident response and root cause analysis with corrective action planning

Obowiązki

Define trust zones, routing boundaries, and inter-zone controls for regional and Global Network, including micro-segmentation and cross-border allow-lists
Produce HLD/LLD, threat models, and control mappings aligned with internal standards and regulations
Design and operate dual-vendor firewall perimeters with HA/cluster design, NAT domain strategy, and SSL/TLS inspection governance
Engineer Zscaler Internet Access for identity-aware egress controls and inline CASB/DLP
Implement Zscaler Private Access for zero-trust per-application access
Design and deliver Site-to-Site VPN (IPsec), Cloud Interconnects, and BGP-based dual-tunnel HA for hybrid cloud connectivity
Deploy Cloudflare Magic Transit/Magic WAN, WAF Management, and rate limiting integrated with on-prem perimeters
Engineer SD-WAN/MPLS/SASE paths with policy routing and encryption
Translate regulatory and internal control requirements into technical controls for logging, data residency, and TLS inspection
Normalize telemetry from firewall, Zscaler, and Cloudflare into SIEM and build detections for anomalies
Lead L3/L4 incident response, containment, and RCA with corrective actions
Manage policies through Terraform/Ansible and vendor APIs, implementing CI/CD with linting and unit tests

Benefity

Hybrid work mode with remote work opportunity within Poland
Chance to work abroad up to 60 days annually
Business-driven relocation opportunities
Career development programs including mentoring and certification support (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay and participation in Employee Stock Purchase Plan with a 15% discount
Benefits package including health insurance, multisport, shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment, relaxation zones, table tennis, football, free snacks and coffee
Corporate, social, and well-being events
Supportive and agile startup-like culture

Elastyczne godziny

Pakiet relokacyjny

Budżet konferencyjny

Dofinansowanie szkoleń

Kursy językowe

Karta sportowa

Opieka zdrowotna

Premie

Udziały pracownicze

Darmowe przekąski

Inne informacje

By applying, candidates consent to personal data processing by EPAM Systems (Poland) sp. z o.o. in accordance with their Privacy Policy. Benefits listed are only for employees. EPAM is open to working with contractors under individually agreed B2B agreements. Selected candidates will be contacted exclusively.

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz