Senior Network Automation Engineer
EPAM Systems
40 hours ago
Be an early applicant
Application generator
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Get past ATS filters
Benefits offered by this job
Qualifications
- 3+ years of hands-on experience in network engineering with a focus on automation.
- Background in automating firewall platforms through Infrastructure as Code, including PaloAlto, F5, and Cloudflare.
- Expertise in deploying Azure networking constructs (VNets, Application Gateway, WAF) and security components (Azure Firewall, NSGs) via Terraform/OpenTofu.
- Knowledge of DNS and IPAM (NetBox) data models and automation.
- Familiarity with VMware NSX-T network segmentation and distributed firewall concepts.
- Proficiency in Ansible for network/firewall configuration tasks, combined with Terraform/OpenTofu-based provisioning.
- Capability to work within change-control processes for high-blast-radius network/security modifications.
- Flexibility to use AI-assisted development with GitHub Copilot (provided project-wide).
- Excellent command of written and spoken English (B2+ level).
Responsibilities
- Develop and maintain firewall automation modules across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, certificate binding).
- Create and support DNS and NetBox IPAM automation (zone/record management, prefix/role/tenant data entry, reconciliation jobs).
- Provide Azure core connectivity modules (VNets/subnets, Application Gateway, WAF, Azure Firewall, NSGs) via Terraform/OpenTofu.
- Assist VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team.
- Perform commit/lock handling procedures for concurrent firewall pipeline changes (PaloAlto/Panorama candidate-config workflows).
- Resolve and remediate production network/firewall issues during Implementation and Adoption, operating within change-control processes."}],
- CoT_job_summary_short":"COMPANY NAME: EPAM Systems\nKEY POINTS: Firewall automation across Palo Alto/F5/Cloudflare, Azure VNets, NSGs via IaC, AI-assisted Copilot development"
- job_summary_short":"<p>EPAM Systems is seeking a Senior Network Engineer to join our IDP delivery team, focusing on automated firewall and network infrastructure. You will develop modules for Palo Alto, F5, and Cloudflare, automate DNS/IPAM with NetBox, and deliver Azure networking constructs via Terraform/OpenTofu. Your role collaborates with VMware NSX-T and supports change-control processes in a fast-paced environment.</p><p>You will apply Ansible alongside Terraform/OpenTofu, utilize AI-assisted tooling with GitHub Copilot, and operate within English language requirements (B2+). This position offers continuous upskilling, private health coverage, and a competitive USD compensation package.</p>
- contract_type":"fulltime","location_type":"on site","remote_scope":null,
- perks":[{
Skills
Automation
Firewall automation
Terraform/OpenTofu
Ansible
Azure networking
NetBox/IPAM
VMware NSX-T
GitHub Copilot
English (B2+)
Tools
Palo Alto
F5
Cloudflare
Terraform/OpenTofu
NetBox
Job description
We are looking for a Senior Network Engineer to join our engagement on the delivery of a Unified Automation Platform — an Internal Developer Platform (IDP) that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.
Within this role, you will contribute to the Network/Firewalls automation stream, developing modules on a modern toolchain (Terraform/OpenTofu for IaC and Ansible for CaC) with AI-assisted development through GitHub Copilot as a standard practice.
Responsibilities
- Develop and maintain firewall automation modules across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, certificate binding), following designs defined by the Network Architect
- Create and support DNS and NetBox IPAM automation (zone/record management, prefix/role/tenant data entry, reconciliation jobs)
- Provide Azure core connectivity modules (VNets/subnets, Application Gateway, WAF, Azure Firewall, NSGs) via Terraform/OpenTofu
- Assist VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
- Perform commit/lock handling procedures for concurrent firewall pipeline changes (PaloAlto/Panorama candidate-config workflows)
- Resolve and remediate production network/firewall issues during Implementation and Adoption, operating within change-control processes given the high blast-radius of network changes
Requirements
- 3+ years of hands-on experience in network engineering with a focus on automation
- Background in automating firewall platforms through Infrastructure as Code, including PaloAlto, F5, and Cloudflare
- Expertise in deploying Azure networking constructs (VNets, Application Gateway, WAF) and security components (Azure Firewall, NSGs) via Terraform/OpenTofu
- Knowledge of DNS and IPAM (NetBox) data models and automation
- Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
- Proficiency in Ansible for network/firewall configuration tasks, combined with Terraform/OpenTofu-based provisioning
- Capability to work within change-control processes for high-blast-radius network/security modifications
- Flexibility to use AI-assisted development with GitHub Copilot (provided project-wide)
- Excellent command of written and spoken English (B2+ level)
Nice to have
- Competency in certificate distribution (Venafi) linked to network/load-balancer endpoints
- Understanding of global traffic management and multi-region failover patterns
We offer
- CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT
- Diversity of tasks and projects
- Assessment center for objective review of competency level
- Personal development plan
- Mentoring programs and leadership development
- Certification and professional development support
- Access to learning platforms including more than 2,500 internal courses
- English courses taught by certified teachers
- CORPORATE BENEFITS
- Extra leave days
- Referral bonuses
- COMPENSATION PACKAGE
- Competitive compensation paid in USD
- Regular salary and performance reviews
- MEDICAL & HEALTHCARE
- Private health insurance
- Well-being events
- WORKING ENVIRONMENT
- Recreation areas and kitchens
- Tea, coffee and snacks
- Sports equipment and game consoles
- IT Equipment
- Microsoft’s Software Assurance Home Use Program (HUP)
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
