Skip To Main Content
epam-logo-black.svgepam-logo-black.svg
backBack to Search

Lead Site Reliability Engineer

Hybrid in Argentina, & 3 others
Site Reliability Engineering& 13 others
Looking for something else?

Find a vacancy that works for you. Send us your CV to receive a personalized offer.

Find me a job
Choose an option

We're looking to add a capable Lead Site Reliability Engineer to our team. Our group handles the network engineering work that powers connectivity spanning Google Cloud, AWS, Azure, and the networks of our external partners. We connect the various clouds through a private interconnect fabric, deploy next-generation firewalls directly in the traffic path, and manage almost the entire setup through code. We're also responsible for the secure access layer linking our workforce to the internet and internal systems, using Zscaler, Menlo Security, and Tailscale

At the moment, we're constructing a new hub-and-spoke network within Google Cloud and integrating it with the rest of our environment. Alongside that, we're developing internal tools that convert real-time network data into actionable answers when incidents occur

Responsibilities
  • Construct and modify cloud networking setups using Terraform, covering VPCs and VNets, transit hubs like GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access via Private Service Connect, PrivateLink, or Private Endpoints, and the routing connecting these components
  • Manage private interconnects including Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, along with their associated BGP sessions, covering circuit additions, routing policy adjustments, and failover testing
  • Oversee firewall policy across both cloud-native firewalls and Palo Alto NGFWs managed through Panorama, handling the full change process from review to deployment
  • Run the secure access technology stack, including Zscaler, Menlo Security browser isolation, Tailscale, and the PAC files guiding traffic between them, while handling policy updates and resolving user connectivity problems
  • Resolve connectivity and performance challenges by analyzing flow logs, firewall logs, BGP state, and synthetic monitoring data from tools like ThousandEyes, taking part in on-call responsibilities and recording findings along the way
  • Enhance Python-based tools responsible for comparing live network state against the intended configuration
  • Evaluate colleagues' merge requests and ensure runbooks and design documentation stay current and precise
Requirements
  • At least 5 years of applicable network engineering experience, including hands-on work building production networks within a public cloud such as GCP, AWS, or Azure, with deep expertise in one platform and openness to learning others considered acceptable
  • A minimum of one year spent managing or guiding development teams
  • Strong foundational routing knowledge, including the capacity to describe how BGP determines its best path, how factors like AS-path, MED, and local preference affect that outcome, and how to troubleshoot a route that's unexpectedly absent
  • Practical experience with Terraform or similar infrastructure-as-code solutions operating within a Git-based review process
  • Hands-on background with network security measures, including firewall rules, security groups, NAT, and network segmentation
  • Working Python ability sufficient to automate routine tasks or retrieve data through a cloud API
  • A structured, evidence-based approach to troubleshooting, involving hypothesis formation, data-driven testing, and outcome documentation
  • Strong writing skills, capable of producing change plans, incident summaries, and documentation other engineers can depend on
  • Upper-Intermediate English language competency (B2)
Nice to have
  • Familiarity with Google Cloud networking components such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny
  • Experience with Equinix Fabric or a comparable interconnect or network-as-a-service provider
  • Background working with Palo Alto NGFW and Panorama, particularly VM-Series deployments running in the cloud
  • Exposure to Zscaler (ZIA/ZPA) or another secure web gateway or zero-trust access solution, Menlo Security or a similar browser isolation tool, and Tailscale or other WireGuard-based access technologies
  • Understanding of BFD and BGP graceful restart, plus experience designing and verifying failover scenarios
  • Background using network monitoring platforms such as ThousandEyes
  • Holding relevant certifications, such as Google Professional Cloud Network Engineer or equivalent AWS credentials, which would be seen as a strong plus