Senior Site Reliability Engineer

EPAM Systems; Mountain View (CA); Remote; USD 150,000 - 230,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off & sick leave

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems Inc in Mountain View seeks a Senior Site Reliability Engineer to join the network engineering team, building and operating cloud networks across Google Cloud, AWS, and Azure. You will manage private interconnects, firewall policies, and secure access tooling, while turning live state into actionable incident guidance.

Strong Python skills and IaC experience are required. The role emphasizes on-call rotations, collaboration with global teams, and documenting runbooks and designs for

Qualifications

• 3+ years in network engineering or SRE with production networks in cloud environments
• Strong routing fundamentals: BGP path selection, AS-path, MED, local preference
• Hands-on with infrastructure-as-code tools (Terraform) in Git workflows
• Experience with cloud networking, security controls, and automation using Python
• Clear written communication for change plans, incident notes, and runbooks

Responsibilities

• Design and modify cloud networks in Terraform (VPCs, VNets, transit hubs)
• Operate private interconnects and manage BGP sessions and failover
• Manage firewall policies across cloud firewalls and Panorama
• Maintain secure access stack (Zscaler, browser isolation, VPN tools)
• Troubleshoot connectivity and performance using logs and monitoring tools
• Review merge requests and keep design docs up to date

Skills

Networks troubleshooting

BGP fundamentals

On-call rotation

English communication

Education

Bachelor's degree in CS or related field

Tools

Terraform

Python

ThousandEyes

Palo Alto Panorama

Zscaler

Tailscale

Job description

We are seeking a skilled Senior Site Reliability Engineer to join our team. We're the network engineering team behind our connectivity across Google Cloud, AWS, Azure, and our external partner networks. We tie the clouds together over a private interconnect fabric, run next-generation firewalls in the traffic path, and manage nearly all of it as code. We also run the secure access layer that connects our people to the internet and to internal services: Zscaler, Menlo Security, and TailscaleRight now we're building a new hub-and-spoke network in Google Cloud and connecting it to the rest of the environment. We're also building in-house tools that turn live network state into clear answers during incidentsResponsibilitiesBuild and change cloud networks in Terraform, including VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access through Private Service Connect, PrivateLink, or Private Endpoints, and the routing that connects them allOperate private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, along with the BGP sessions running over them, including adding circuits, tuning routing policy, and testing failoverMaintain firewall policy across cloud-native firewalls and Palo Alto NGFWs via Panorama, managing changes from review through deploymentOperate the secure access stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the proxy auto-config (PAC) files that direct traffic between them, making policy changes and troubleshooting user connectivityTroubleshoot connectivity and performance issues using flow logs, firewall logs, BGP state, and synthetic monitoring tools such as ThousandEyes, while participating in the team's on-call rotation and documenting findingsExtend Python-based tooling that validates live network state against intended configurationReview teammates' merge requests and keep runbooks and design documentation accurate and up to dateRequirementsA minimum of 3 years of relevant experience in network engineering, including building production networks in a public cloud such as GCP, AWS, or Azure, with deep knowledge of one cloud and willingness to learn others considered sufficientSolid routing fundamentals, including the ability to explain how BGP selects a best path, how AS-path, MED, and local preference influence that decision, and how to diagnose a missing expected routeHands-on experience with Terraform or comparable infrastructure-as-code tools within a Git-based review workflowPractical experience with network security controls, including firewall rules, security groups, NAT, and segmentationSufficient Python skills to automate repetitive tasks or pull data from a cloud APIA methodical troubleshooting approach, forming hypotheses, testing them against data, and recording outcomesStrong written communication skills, producing change plans, incident notes, and documentation that other engineers can rely onUpper-Intermediate English language competency (B2)Nice to haveExperience with Google Cloud networking tools such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM DenyFamiliarity with Equinix Fabric or another interconnect or network-as-a-service providerExperience with Palo Alto NGFW and Panorama, ideally including VM-Series deployed in the cloudBackground with Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access platform, Menlo Security or another browser isolation product, and Tailscale or other WireGuard-based access solutionsKnowledge of BFD and BGP graceful restart, along with experience designing failover scenarios and validating that they workExperience with network monitoring platforms such as ThousandEyesRelevant certifications, such as Google Professional Cloud Network Engineer or AWS equivalents, which would be considered a valuable additionWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn