We're seeking an accomplished Chief Site Reliability Engineer to join our organization. Our team drives the network engineering efforts that enable connectivity across Google Cloud, AWS, Azure, and the networks belonging to our external partners. We link the different cloud environments through a private interconnect fabric, position next-generation firewalls directly within the traffic flow, and manage nearly the entirety of this setup programmatically. We also own the secure access layer that connects our employees to the internet and to internal systems, relying on Zscaler, Menlo Security, and Tailscale.
Currently, we're in the process of building a new hub-and-spoke network inside Google Cloud and linking it with the broader environment. In parallel, we're creating internal tooling that transforms live network data into clear, actionable insight during incident response.
ResponsibilitiesBuild and adjust cloud network configurations through Terraform, encompassing VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access using Private Service Connect, PrivateLink, or Private Endpoints, plus the routing linking all these pieces togetherAdminister private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, together with the BGP sessions running across them, handling circuit provisioning, routing policy tuning, and failover validationGovern firewall policy spanning cloud-native firewalls as well as Palo Alto NGFWs operated via Panorama, managing every change from initial review through final deploymentMaintain the secure access technology suite, including Zscaler, Menlo Security browser isolation, Tailscale, and the PAC files that route traffic among them,



while implementing policy changes and troubleshooting connectivity concerns for usersAddress connectivity and performance problems by examining flow logs, firewall logs, BGP state information, and synthetic monitoring output from platforms such as ThousandEyes, participating in on-call duties and documenting discoveriesImprove and expand Python-based tooling used to compare live network state against the desired configurationAssess merge requests submitted by team members and keep runbooks and design documentation current and accurateRequirementsA minimum of 7 years of relevant network engineering background, including direct experience building production-grade networks within a public cloud platform such as GCP, AWS, or Azure, with strong depth in one platform and a willingness to expand into others considered sufficientAt least 2 years spent managing or directing development teamsFirm grasp of routing principles, including explaining how BGP arrives at a best path, how elements like AS-path, MED, and local preference shape that decision, and how to pinpoint why an anticipated route is missingHands-on familiarity with Terraform or equivalent infrastructure-as-code tools used within a Git-based review processDemonstrated experience with network security mechanisms, including firewall rules, security groups, NAT, and segmentation strategiesAdequate Python competency to automate recurring tasks or extract data via a cloud APIA disciplined,



data-driven troubleshooting methodology, involving forming hypotheses, validating them against evidence, and logging resultsExcellent writing ability, producing change plans, incident documentation, and reference materials that fellow engineers can trustUpper-Intermediate English language competency (B2)Nice to haveKnowledge of Google Cloud networking features such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM DenyBackground with Equinix Fabric or another similar interconnect or network-as-a-service offeringExperience working with Palo Alto NGFW and Panorama, particularly VM-Series instances deployed in cloud environmentsFamiliarity with Zscaler (ZIA/ZPA) or a comparable secure web gateway or zero-trust access platform, Menlo Security or a similar browser isolation solution, and Tailscale or other WireGuard-based access toolsAwareness of BFD and BGP graceful restart concepts, along with experience architecting and confirming failover designsExperience leveraging network monitoring solutions such as ThousandEyesPossessing relevant certifications, such as Google Professional Cloud Network Engineer or comparable AWS credentials, which would be regarded as a strong advantageWe offerInternational projects with top brandsWork with general teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newswee

📌 Chief Site Reliability Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia