security engineer in network automation

EPAM is delivering a Unified Automation Platform, an Internal Developer Platform that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.

• Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare, including security rules, address and service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect;
• Build and maintain DNS and NetBox IPAM automation, including zone and record management, prefix, role, and tenant data entry, and reconciliation jobs;
• Deliver Azure core connectivity modules through Terraform/OpenTofu, including VNets, subnets, Application Gateway, WAF, Azure Firewall, and NSGs;
• Support VMware NSX-T segment and distributed firewall rule implementation in coordination with the VMware team;
• Execute commit and lock handling procedures for concurrent firewall pipeline changes using PaloAlto/Panorama candidate-config workflows;
• Troubleshoot and remediate production network and firewall issues during Implementation and Adoption within change-control processes.

• 3+ Years of hands-on network engineering experience focused on automation;
• Experience automating firewall platforms through Infrastructure as Code, including PaloAlto, F5, and Cloudflare;
• Expertise in implementing Azure networking constructs and security components through Terraform/OpenTofu;
• Knowledge of DNS and IPAM data models and automation;
• Familiarity with VMware NSX-T network segmentation and distributed firewall concepts;
• Proficiency in Ansible for network and firewall configuration tasks combined with Terraform/OpenTofu-based provisioning;
• Ability to operate within change-control processes for high-blast-radius network and security modifications;
• Flexibility to use AI-assisted development with GitHub Copilot;
• Excellent written and spoken English at B2+ level;
• Nice to have: Skills in certificate distribution with Venafi tied to network/load-balancer endpoints, exposure to global traffic management and multi-region failover patterns.

• No conditions specified