Global Network Security Consultant - Zero-Trust & SD-WAN Expert

EPAM Systems Inc; United States; Remote; USD 140,000 - 200,000; Full time

Job summary

EPAM Systems Inc. seeks a Consultant – Network Security to design, implement, and operate secure network segmentation between regional environments and Global networks.

The role blends architecture, hands-on engineering, automation, and leadership to deliver policy-driven connectivity under strict regulatory requirements. You will work with Check Point, Palo Alto, ZIA/ZPA, and Cloudflare to enforce zero-trust, encryption, and compliant logging, while leading L3/L4 incidents and driving

Qualifications

• Experience in network security architecture and operations.
• Strong knowledge of regional/global network design and regulatory requirements.
• Experience with Check Point, Palo Alto, ZIA/ZPA, Cloudflare.

Responsibilities

• Define trust zones and inter-zone controls for regional and global networks.
• Produce architecture and threat models aligned to standards.
• Design dual-vendor firewall perimeters with HA and NAT strategy.
• Engineer ZIA and ZPA deployments for zero-trust access.
• Implement Cloudflare for DDoS mitigation, WAF, and protection.
• Translate regulatory requirements into enforceable controls.
• Lead L3/L4 incidents and coordinate RCAs with actions.
• Automate policy deployment with Terraform/Ansible.
• Operate site-to-site VPNs and cloud interconnects.

Skills

Network security

Cross-border connectivity

Threat modeling

Incident response

Zero-trust

Policy automation

Terraform

Ansible

Cloud security

Tools

Check Point

Palo Alto

Zscaler

Cloudflare

Job description

EPAM Systems Inc. seeks a Consultant – Network Security to design, implement, and operate secure network segmentation between regional environments and Global networks.

The role blends architecture, hands-on engineering, automation, and leadership to deliver policy-driven connectivity under strict regulatory requirements. You will work with Check Point, Palo Alto, ZIA/ZPA, and Cloudflare to enforce zero-trust, encryption, and compliant logging, while leading L3/L4 incidents and driving