Senior Site Reliability Engineer

We are seeking a skilled Senior Site Reliability Engineer to join our team. We're the network engineering team behind our connectivity across Google Cloud, AWS, Azure, and our external partner networks. We tie the clouds together over a private interconnect fabric, run next-generation firewalls in the traffic path, and manage nearly all of it as code. We also run the secure access layer that connects our people to the internet and to internal services:
Zscaler, Menlo Security, and Tailscale Right now we're building a new hub-and-spoke network in Google Cloud and connecting it to the rest of the environment. We're also building in-house tools that turn live network state into clear answers during incidents

Responsibilities

Build and change cloud networks in Terraform, including VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access through Private Service Connect, Private Link, or Private Endpoints, and the routing that connects them all Operate private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and Express Route, along with the BGP sessions running over them, including adding circuits, tuning routing policy, and testing failover

Maintain firewall policy across cloud-native firewalls and Palo Alto NGFWs via Panorama, managing changes from review through deployment

Operate the secure access stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the proxy auto-config (PAC) files that direct traffic between them, making policy changes and troubleshooting user connectivity

Troubleshoot connectivity and performance issues using flow logs, firewall logs, BGP state, and synthetic monitoring tools such as Thousand Eyes, while participating in the team's on-call rotation and documenting findings

Extend Python-based tooling that validates live network state against intended configuration

Review teammates' merge requests and keep runbooks and design documentation accurate and up to date

RequirementsA minimum of 3 years of relevant experience in network engineering, including building production networks in a public cloud such as GCP, AWS, or Azure, with deep knowledge of one cloud and willingness to learn others considered sufficient

Solid routing fundamentals, including the ability to explain how BGP selects a best path, how AS-path, MED, and local preference influence that decision, and how to diagnose a missing expected route

Hands-on experience with Terraform or comparable infrastructure-as-code tools within a Git-based review workflow

Practical experience with network security controls, including firewall rules, security groups, NAT, and segmentation

Sufficient Python skills to automate repetitive tasks or pull data from a cloud APIA methodical troubleshooting approach, forming hypotheses, testing them against data, and recording outcomes

Strong written communication skills, producing change plans, incident notes, and documentation that other engineers can rely on Upper-Intermediate English language competency (B2)
Nice to have

Experience with Google Cloud networking tools such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny Familiarity with Equinix Fabric or another interconnect or network-as-a-service provider

Experience with Palo Alto NGFW and Panorama, ideally including VM-Series deployed in the cloud

Background with Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access platform, Menlo Security or another browser isolation product, and Tailscale or other Wire Guard-based access solutions

Knowledge of BFD and BGP graceful restart, along with experience designing failover scenarios and validating that they work

Experience with network monitoring platforms such as Thousand Eyes Relevant  certifications, such as Google Professional Cloud Network Engineer or AWS equivalents, which would be considered a valuable addition

We offer

International projects with top brands

Work with global teams of highly skilled, diverse peers

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling, reskilling and certification courses

Unlimited access to the Linked In Learning library and 22,000+ courses

Global career opportunities

Volunteer and community involvement opportunitiesEPAM Employee Groups Award-winning culture recognized by Glassdoor, Newsweek and Linked In