low-code developer enterprise network infrastructure

EPAM provides enterprise software products, open source solutions, and technology accelerators.

• Design the core network connectivity foundation across Azure VNets/subnets, Application Gateway, WAF, Azure Firewall, NSGs, and Route Tables;
• Architect DNS and NetBox IPAM integration, consolidating on-premises and Azure network estate data into a single source of truth;
• Design multi-vendor firewall automation architecture across PaloAlto, F5, and Cloudflare, including security rules, objects, NAT, VIP/pool configuration, WAF policies, certificate binding, and concurrent pipeline commit/lock handling;
• Architect VMware NSX-T network segments, distributed firewall policies, load balancing, and NAT while maintaining addressing consistency with NetBox;
• Define hybrid connectivity architecture for Azure VMware Solution and ExpressRoute across on-premises, VMware, and Azure environments;
• Contribute network-architecture input to roadmap capabilities, including global traffic management, multi-region patterns, SSE/ZTNA, and BGP/routing;
• Partner with the Azure Architect, VMware Architect, and Integration Architect to align network design with identity, certificate, and secrets architecture;
• Provide architectural governance for network and firewall change control;
• Support production validation during Implementation and Adoption.

• 2+ Years of enterprise network architecture experience across Azure networking and network/security platforms including PaloAlto and F5;
• Experience automating network infrastructure with Infrastructure as Code using Terraform/OpenTofu, including complex firewall and application delivery controller modules;
• Understanding of DNS architecture, including split-horizon and internal/public authoritative DNS;
• Experience with IP address management tooling such as NetBox;
• Familiarity with VMware NSX-T network segmentation and distributed firewall policy modeling;
• Experience designing hybrid on-premises-to-cloud connectivity, including ExpressRoute-based patterns;
• Ability to work within change-control processes for high-blast-radius network and security modifications;
• English proficiency at B2+ level;
• Nice to have: Cloudflare VIP/pool, WAF policy, and certificate-binding automation; global traffic management and multi-region failover patterns; SSE/ZTNA architectures and BGP-based routing modules; network provisioning integration with a self-service developer portal such as Backstage; certificate distribution with Venafi tied to network and load-balancer endpoints.

• No conditions specified