Senior Site Reliability Engineer

EPAM Systems Inc; México; À distance; MXN 800 000 - 1 200 000; Plein temps

Résumé du poste

EPAM Systems Inc seeks a Senior Site Reliability Engineer to help design and operate our cloud network fabric across Google Cloud, AWS, and Azure. You will manage interconnects, BGP, and firewall policies, while extending Python tools to validate live state and automate tasks.

You will review changes, maintain runbooks, and contribute to incident response with strong written communications across global teams. This role is based in Mexico with on-site work expectations.

Qualifications

• Minimum 3 years in network engineering with cloud production networks.
• Strong understanding of BGP best path selection and route diagnostics.
• Hands-on Terraform or infrastructure-as-code in a Git-based workflow.
• Experience with firewall rules, NAT, segmentation, and security groups.
• Sufficient Python skills to automate tasks and pull cloud API data.
• Clear written communication for change plans and incident notes.
• Upper-Intermediate English (B2).

Responsabilités

• Build and change cloud networks in Terraform for VPCs/VNets and hubs.
• Operate private interconnects and manage BGP sessions and failover tuning.
• Maintain firewall policies via Panorama and cloud-native firewalls.
• Extend Python tooling to validate live network state against config.
• Review merge requests and keep runbooks and design docs up to date.

Connaissances

Terraform

Python scripting

Network security controls

BGP and routing fundamentals

Public cloud networking (GCP/AWS/Azure

Git-based IaC workflows

Troubleshooting & incident response

Documentation & runbooks

English communication (B2)

Formation

Google Professional Cloud Network Engineer

AWS networking certifications

Outils

ThousandEyes

Palo Alto Panorama

Zscaler

Menlo Security

Tailscale

Terraform

Description du poste

We are seeking a skilled Senior Site Reliability Engineer to join our team. We're the network engineering team behind our connectivity across Google Cloud, AWS, Azure, and our external partner networks. We tie the clouds together over a private interconnect fabric, run next-generation firewalls in the traffic path, and manage nearly all of it as code. We also run the secure access layer that connects our people to the internet and to internal services: Zscaler, Menlo Security, and TailscaleRight now we're building a new hub-and-spoke network in Google Cloud and connecting it to the rest of the environment. We're also building in-house tools that turn live network state into clear answers during incidentsResponsibilitiesBuild and change cloud networks in Terraform, including VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access through Private Service Connect, PrivateLink, or Private Endpoints, and the routing that connects them allOperate private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, along with the BGP sessions running over them, including adding circuits, tuning routing policy, and testing failoverMaintain firewall policy across cloud-native firewalls and Palo Alto NGFWs via Panorama, managing changes from review through deploymentOperate the secure access stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the proxy auto-config (PAC) files that direct traffic between them, making policy changes and troubleshooting user connectivityTroubleshoot connectivity and performance issues using flow logs, firewall logs, BGP state, and synthetic monitoring tools such as ThousandEyes, while participating in the team's on-call rotation and documenting findingsExtend Python-based tooling that validates live network state against intended configurationReview teammates' merge requests and keep runbooks and design documentation accurate and up to dateRequirementsA minimum of 3 years of relevant experience in network engineering, including building production networks in a public cloud such as GCP, AWS, or Azure, with deep knowledge of one cloud and willingness to learn others considered sufficientSolid routing fundamentals, including the ability to explain how BGP selects a best path, how AS-path, MED, and local preference influence that decision, and how to diagnose a missing expected routeHands-on experience with Terraform or comparable infrastructure-as-code tools within a Git-based review workflowPractical experience with network security controls, including firewall rules, security groups, NAT, and segmentationSufficient Python skills to automate repetitive tasks or pull data from a cloud APIA methodical troubleshooting approach, forming hypotheses, testing them against data, and recording outcomesStrong written communication skills, producing change plans, incident notes, and documentation that other engineers can rely onUpper-Intermediate English language competency (B2)Nice to haveExperience with Google Cloud networking tools such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM DenyFamiliarity with Equinix Fabric or another interconnect or network-as-a-service providerExperience with Palo Alto NGFW and Panorama, ideally including VM-Series deployed in the cloudBackground with Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access platform, Menlo Security or another browser isolation product, and Tailscale or other WireGuard-based access solutionsKnowledge of BFD and BGP graceful restart, along with experience designing failover scenarios and validating that they workExperience with network monitoring platforms such as ThousandEyesRelevant certifications, such as Google Professional Cloud Network Engineer or AWS equivalents, which would be considered a valuable additionWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.