Lead Networks & Telecommunications Engineer

EPAM Systems; Polska; On-site; PLN 250,000 - 380,000; Full time

Job summary

EPAM Systems is seeking a Lead Networks & Telecommunications Engineer to own the architecture, security, and automation of global Cisco ACI data center fabrics.

You will drive design and delivery of advanced load balancing and ADC solutions across production environments, including F5 BIG-IP migrations and Kubernetes integration, with travel to the Netherlands as required.

Qualifications

• 5+ years of Cisco ACI experience in multi-pod/multi-site fabrics.
• 5+ years VXLAN and vPC in data center fabrics.
• 3+ years F5 BIG-IP and Citrix NetScaler experience.
• English proficiency at B2 level or higher.

Responsibilities

• Own the architecture, security, product and service design, automation, and innovation for a global Cisco ACI fabric across production data center environments.
• Define product descriptions and tiered service offerings for ADC and DCLAN services, including explicit SLOs for availability, failover time, and change-request lead time.
• Maintain service catalog alignment to business consumption models.
• Design secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate, and F5 without production impact.
• Identify and document platform constraints impacting VRF remap behavior.
• Architect and deliver F5 BIG-IP migrations on ACI 6.0, producing validated configuration bundles, automated deployment scripts, and validation documentation.
• Drive ACI ESG micro-segmentation strategy and migration execution, including phased contract design.
• Build Python tooling for tenant migration validation and configuration generation.
• Design Cilium BGP L3Out integration for Kubernetes workloads on ACI, including BFD tuning for VMware compatibility and route-map controls to prevent pod CIDR leakage into the fabric VRF.
• Build hybrid IaC pipelines for F5 BIG-IP LTM/SSL services with tiered service models and ServiceNow-triggered provisioning.
• Ensure operational excellence by sustaining high fabric availability, reducing unscheduled outages, meeting aggressive CVE patch timelines, and maintaining strong zero-trust segmentation audit scores.

Skills

Cisco ACI

VXLAN

Nexus 9K/7K/5K

F5 BIG-IP

Citrix NetScaler

Python

Tools

Terraform

Ansible/AWX

GitLab CI/CD

GitHub Actions

Azure DevOps Pipelines

Job description

We are seeking a Lead Networks & Telecommunications Engineer to own the architecture, security, and automation of global Cisco ACI data center fabrics while driving the design and delivery of advanced load balancing and ADC solutions across production environments. Please note that travel to the Netherlands is required.

Responsibilities

• Lead the architecture, security, product and service design, automation, and innovation efforts for a global Cisco ACI fabric across production data center environments
• Define product descriptions and tiered service offerings for ADC and DCLAN services, including explicit SLOs for availability, failover time, and change-request lead time
• Maintain service catalog alignment to business consumption models
• Design and implement secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate, and F5 without production impact
• Identify and document platform constraints impacting VRF remap behavior
• Architect and deliver F5 BIG-IP Dual-PBR No-SNAT migrations on ACI 6.0, producing validated configuration bundles, automated deployment scripts, and validation documentation
• Drive ACI ESG micro-segmentation strategy and migration execution, including phased contract design
• Build Python tooling for tenant migration validation and configuration generation
• Design Cilium BGP L3Out integration for Kubernetes workloads on ACI, including BFD tuning for VMware compatibility and route-map controls to prevent pod CIDR leakage into the fabric VRF
• Build hybrid IaC pipelines for F5 BIG-IP LTM/SSL services with tiered service models and ServiceNow-triggered provisioning
• Ensure operational excellence by sustaining high fabric availability, reducing unscheduled outages, meeting aggressive CVE patch timelines, and maintaining strong zero-trust segmentation audit scores

Requirements

• 5+ years of experience with Cisco ACI (Multi-Pod, Multi-Site, ESG, PBR Service Graphs, APIC REST API) and Nexus 9K/7K/5K platforms
• 5+ years of experience with VXLAN and vPC technologies in data center fabric environments
• 3+ years of experience with F5 BIG-IP (LTM, GTM/DNS, iRules, PBR, DSR, SNAT/No-SNAT) and Citrix NetScaler
• English proficiency at B2 level or higher

Nice to have

• Skills in Terraform and Ansible/AWX for infrastructure automation
• Proficiency in Python for scripting and tooling development
• Familiarity with GitLab CI/CD, GitHub Actions, and Azure DevOps Pipelines