Consultant - Network Security

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. The company has over thirty years of expertise in custom software, product and platform engineering, empowering clients to become AI-Native enterprises.

• 5+ years experience in network security architecture and operations focusing on cross-border or multi-region connectivity
• Expertise in Check Point Security Gateways, Palo Alto Networks next-generation firewalls, and Panorama management
• Proficiency with Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) zero-trust architectures
• Skills in Cloudflare Magic Transit/Magic WAN, WAF management, and DDoS mitigation
• Knowledge of cloud hybrid connectivity technologies including Site-to-Site VPN, Cloud Interconnect, and BGP routing
• Background in SD-WAN, MPLS, and SASE architectures with policy-based routing and encryption protocols
• Understanding of regulatory/compliance frameworks related to data residency, TLS inspection, and lawful intercept
• Familiarity with SIEM platforms and telemetry normalization for security monitoring
• Competency in Terraform, Ansible, and vendor APIs for policy-as-code and CI/CD pipeline integration
• Capability to lead L3/L4 incident response and conduct root cause analysis with corrective action planning

• Define trust zones, routing boundaries, and inter-zone controls for regional and Global Networks
• Produce HLD/LLD, threat models, and control mappings aligned with standards and regulations
• Design and operate dual-vendor firewall perimeters with HA, failover, NAT, SSL/TLS inspection, and threat prevention
• Engineer Zscaler Internet Access (ZIA) for identity-aware egress controls and inline CASB/DLP
• Implement Zscaler Private Access (ZPA) for zero-trust application access and app segmentation
• Design and deliver Site-to-Site VPN, Cloud Interconnect, and BGP-based dual-tunnel HA for cloud hybrid connectivity
• Deploy Cloudflare Magic Transit/Magic WAN, WAF management, and rate limiting for internet-facing services
• Engineer SD-WAN/MPLS/SASE paths with policy-based routing and strong encryption
• Translate regulatory and internal control requirements into technical controls for logging, data residency, TLS inspection, and lawful intercept
• Normalize telemetry from firewall, Zscaler, and Cloudflare platforms into SIEM with regional data handling rules
• Lead L3/L4 security incidents, coordinate containment, and drive root cause analyses
• Manage firewall, Zscaler, and Cloudflare policies through Terraform/Ansible and vendor APIs, implementing CI/CD with policy linting, unit tests, and path simulation

By applying, candidates agree to personal data processing by EPAM Systems (Poland) sp. z o.o. for recruitment purposes according to the Privacy Policy available on the EPAM website.