Global Network Security Architect — Zero-Trust & Cloud Edge

EPAM Systems; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid by design

Remote within Poland

Relocation opportunities

Stock purchase plan

Health insurance

English classes

Job summary

EPAM Systems seeks a Consultant – Network Security to design, implement, and operate secure network segmentation between regional environments and Global networks. You will work with Check Point, Palo Alto, ZIA/ZPA, and Cloudflare to enforce policy-driven connectivity under regulatory requirements.

The role blends architecture, hands‑on engineering, and L3/L4 leadership, including Terraform-based policy management, CI/CD linting, and cross-border threat modelling.

Qualifications

• 5+ years in network security architecture and operations.
• Experience designing secure cross-border or multi-region connectivity.
• Hands-on with Check Point and Palo Alto gateways.
• Proficient with ZIA/ZPA for zero-trust architecture.
• Familiar with Cloudflare DDoS, WAF and application protection.

Responsibilities

• Define trust zones and inter-zone controls for regional/global networks.
• Produce HLD/LLD, threat models, and control mappings per standards.
• Design dual-vendor firewall perimeters with HA/cluster design and TLS inspection governance.
• Engineer ZIA and ZPA deployments for identity-aware access and app segmentation.
• Implement VPNs (IPSec), Cloud Interconnect, and BGP-based dual-tunnel HA per site.
• Deploy Cloudflare services and rate limiting for internet-facing services.
• Lead L3/L4 incident response and coordinate RCAs with corrective actions.
• Manage policy via Terraform/Ansible and enable CI/CD with policy linting.

Skills

Network security

Firewall expertise

Zero-trust

Cloud security

Terraform/Ansible

SIEM integration

Threat modelling

Tools

Check Point

Palo Alto

ZIA

ZPA

Cloudflare

Job description

EPAM Systems seeks a Consultant – Network Security to design, implement, and operate secure network segmentation between regional environments and Global networks. You will work with Check Point, Palo Alto, ZIA/ZPA, and Cloudflare to enforce policy-driven connectivity under regulatory requirements.

The role blends architecture, hands‑on engineering, and L3/L4 leadership, including Terraform-based policy management, CI/CD linting, and cross-border threat modelling.