We're seeking an accomplished Chief Site Reliability Engineer to join our organization.

Our team drives the network engineering efforts that enable connectivity across Google Cloud, AWS, Azure, and the networks belonging to our external partners.

We link the different cloud environments through a private interconnect fabric, position next-generation firewalls directly within the traffic flow, and manage nearly the entirety of this setup programmatically.

We also own the secure access layer that connects our employees to the internet and to internal systems, relying on Zscaler, Menlo Security, and Tailscale.

Currently, we're in the process of building a new hub-and-spoke network inside Google Cloud and linking it with the broader environment.

In parallel, we're creating internal tooling that transforms live network data into clear, actionable insight during incident response.

Responsibilities

Build and adjust cloud network configurations through Terraform, encompassing VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access using Private Service Connect, Private

Link, or Private Endpoints, plus the routing linking all these pieces together

Administer private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and Express

Route, together with the BGP sessions running across them, handling circuit provisioning, routing policy tuning, and failover validation

Govern firewall policy spanning cloud-native firewalls as well as Palo Alto NGFWs operated via Panorama, managing every change from initial review through final deployment

Maintain the secure access technology suite, including Zscaler, Menlo Security browser isolation, Tailscale, and the PAC files that route traffic among them, while implementing policy changes and troubleshooting connectivity concerns for users

Address connectivity and performance problems by examining flow logs, firewall logs,



BGP state information, and synthetic monitoring output from platforms such as Thousand

Eyes, participating in on-call duties and documenting discoveries

Improve and expand Python-based tooling used to compare live network state against the desired configuration

Assess merge requests submitted by team members and keep runbooks and design documentation current and accurate

RequirementsA minimum of 7 years of relevant network engineering background, including direct experience building production-grade networks within a public cloud platform such as GCP, AWS, or Azure, with strong depth in one platform and a willingness to expand into others considered sufficient

At least 2 years spent managing or directing development teams

Firm grasp of routing principles, including explaining how BGP arrives at a best path, how elements like AS-path, MED, and local preference shape that decision, and how to pinpoint why an anticipated route is missing

Hands-on familiarity with Terraform or equivalent infrastructure-as-code tools used within a Git-based review process

Demonstrated experience with network security mechanisms, including firewall rules, security groups, NAT, and segmentation strategies

Adequate Python competency to automate recurring tasks or extract data via a cloud APIA disciplined, data-driven troubleshooting methodology, involving forming hypotheses, validating them against evidence, and logging results

Excellent writing ability, producing change plans, incident documentation, and reference materials that fellow engineers can trust





Upper-Intermediate English language competency (B2)Nice to have

Knowledge of Google Cloud networking features such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny

Background with Equinix Fabric or another similar interconnect or network-as-a-service offering

Experience working with Palo Alto NGFW and Panorama, particularly VM-Series instances deployed in cloud environments

Familiarity with Zscaler (ZIA/ZPA) or a comparable secure web gateway or zero-trust access platform, Menlo Security or a similar browser isolation solution, and Tailscale or other Wire

Guard-based access tools

Awareness of BFD and BGP graceful restart concepts, along with experience architecting and confirming failover designs

Experience leveraging network monitoring solutions such as Thousand

Eyes

Possessing relevant certifications, such as Google Professional Cloud Network Engineer or comparable AWS credentials, which would be regarded as a strong advantage

We offer

International projects with top brands

Work with general teams of highly skilled, diverse peers

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling, reskilling and certification courses

Unlimited access to the Linked

In Learning library and 22,000+ courses

Global career opportunities

Volunteer and community involvement opportunitiesEPAM Employee Groups

Award-winning culture recognized by Glassdoor, Newsweek and Linked

InEPAM is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law. #J-18808-Ljbffr

📌 Chief Site Reliability Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia