We're looking to add a capable Lead Site Reliability Engineer to our team.

Our group handles the network engineering work that powers connectivity spanning Google Cloud, AWS, Azure, and the networks of our external partners.

We connect the various clouds through a private interconnect fabric, deploy next-generation firewalls directly in the traffic path, and manage almost the entire setup through code.

We're also responsible for the secure access layer linking our workforce to the internet and internal systems, using Zscaler, Menlo Security, and Tailscale

At the moment, we're constructing a new hub-and-spoke network within Google Cloud and integrating it with the rest of our environment.

Alongside that, we're developing internal tools that convert real-time network data into actionable answers when incidents occur

Responsibilities

Construct and modify cloud networking setups using Terraform, covering VPCs and VNets, transit hubs like GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access via Private Service Connect, Private

Link, or Private Endpoints, and the routing connecting these components

Manage private interconnects including Equinix Fabric, Cloud Interconnect, Direct Connect, and Express

Route, along with their associated BGP sessions, covering circuit additions, routing policy adjustments, and failover testing

Oversee firewall policy across both cloud-native firewalls and Palo Alto NGFWs managed through Panorama, handling the full change process from review to deployment

Run the secure access technology stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the PAC files guiding traffic between them, while handling policy updates and resolving user connectivity problems

Resolve connectivity and performance challenges by analyzing flow logs, firewall logs, BGP state, and synthetic monitoring data from tools like Thousand





Eyes, taking part in on-call responsibilities and recording findings along the way

Enhance Python-based tools responsible for comparing live network state against the intended configuration

Evaluate colleagues' merge requests and ensure runbooks and design documentation stay current and precise

Requirements

At least 5 years of applicable network engineering experience, including hands-on work building production networks within a public cloud such as GCP, AWS, or Azure, with deep expertise in one platform and openness to learning others considered acceptableA minimum of one year spent managing or guiding development teams

Strong foundational routing knowledge, including the capacity to describe how BGP determines its best path, how factors like AS-path, MED, and local preference affect that outcome, and how to troubleshoot a route that's unexpectedly absent

Practical experience with Terraform or similar infrastructure-as-code solutions operating within a Git-based review process

Hands-on background with network security measures, including firewall rules, security groups, NAT, and network segmentation

Working Python ability sufficient to automate routine tasks or retrieve data through a cloud APIA structured, evidence-based approach to troubleshooting, involving hypothesis formation, data-driven testing, and outcome documentation

Strong writing skills, capable of producing change plans, incident summaries, and documentation other engineers can depend on





Upper-Intermediate English language competency (B2)Nice to have

Familiarity with Google Cloud networking components such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny

Experience with Equinix Fabric or a comparable interconnect or network-as-a-service provider

Background working with Palo Alto NGFW and Panorama, particularly VM-Series deployments running in the cloud

Exposure to Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access solution, Menlo Security or a similar browser isolation tool, and Tailscale or other Wire

Guard-based access technologies

Understanding of BFD and BGP graceful restart, plus experience designing and verifying failover scenarios

Background using network monitoring platforms such as Thousand

Eyes

Holding relevant certifications, such as Google Professional Cloud Network Engineer or equivalent AWS credentials, which would be seen as a strong plus

We offer

International projects with top brands

Work with global teams of highly skilled, diverse peers

Healthcare benefits

Employee financial programs

Paid time off and sick leave

Upskilling, reskilling and certification courses

Unlimited access to the Linked

In Learning library and 22,000+ courses

General career opportunities

Volunteer and community involvement opportunitiesEPAM Employee Groups

Award-winning culture recognized by Glassdoor, Newsweek and Linked

InEPAM is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law. #J-18808-Ljbffr

📌 Lead Site Reliability Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia