Software Engineer
Network Architect
Удалённо
Откликнуться на сайте работодателяОписание вакансии
We are seeking a
Network Architect
to design and govern enterprise network infrastructure across Azure, on-premises VMware environments, and multi-vendor security platforms, ensuring a scalable, secure, and automated foundation for hybrid connectivity and network operations.
This is a fully remote position that offers you the flexibility to work from any location in Armenia, whether it's your home or well-equipped offices in Yerevan or Gyumri.
Responsibilities
- Design the core network connectivity foundation — Azure VNets/subnets, Application Gateway, WAF, and Azure Firewall with NSGs and Route Tables — as the foundational layer that all other Azure automation modules depend on
- Architect the DNS and NetBox IPAM integration: internal zones/records, public authoritative DNS, and the prefix/role/tenant/site/VRF data model, reconciling existing on-premises and Azure network estate data into a single source of truth
- Design multi-vendor firewall automation architecture across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy attachment, certificate binding), including commit/lock handling for concurrent pipeline execution
- Architect VMware NSX-T network segments (segments/T1 routers), distributed firewall (DFW) rules/groups/tags, and load balancing/NAT, ensuring addressing consistency with NetBox
- Define hybrid connectivity architecture for Azure VMware Solution (AVS)/ExpressRoute, ensuring consistent routing and security posture between on-premises, VMware, and Azure environments
- Contribute network-architecture input to next-phase capabilities identified in the roadmap, including global traffic management/multi-region patterns and additional infrastructure modules (SSE/ZTNA, BGP/routing)
- Partner with the Azure Architect, VMware Architect, and Integration Architect (Security Focus) to ensure network design aligns with identity, certificate, and secrets architecture
- Provide architectural governance for network and firewall change control, given the high blast-radius nature of these changes, and support production validation during Implementation and Adoption
Requirements
- 2+ years of enterprise network architecture experience across Azure networking (VNets, Application Gateway, WAF, Azure Firewall, NSGs) and network/security platforms (PaloAlto, F5)
- Experience automating network infrastructure via Infrastructure as Code (Terraform/OpenTofu), including complex modules for firewalls and application delivery controllers
- Understanding of DNS architecture (split-horizon, internal/public authoritative) and IP address management (IPAM) tooling such as NetBox
- Familiarity with VMware NSX-T network segmentation and distributed firewall policy modeling
- Experience designing hybrid on-premises-to-cloud connectivity, including ExpressRoute-based patterns
- Ability to operate within change-control processes for high-blast-radius network and security modifications
- Proficiency in English at a B2+ level
Nice to have
- Experience with Cloudflare for VIP/pool, WAF policy, and certificate-binding automation
- Familiarity with global traffic management/multi-region failover patterns (active/passive)
- Exposure to SSE/ZTNA architectures and BGP-based routing modules
- Experience integrating network provisioning with a self-service developer portal (Backstage or equivalent)
- Familiarity with certificate distribution (Venafi) tied to network and load-balancer endpoints
We offer
- We connect like-minded people
- Delivering innovative solutions to industry leaders, making a global impact
- Enjoyable working environment, whether it is the vibrant office or the comfort of your home
- Opportunity to work abroad for up to two months per year
- Relocation opportunities within our offices in 55+ countries
- Corporate and social events
- We invest in your growth
- Leadership development, career advising, soft skills and well-being programs
- Certifications, including GCP, Azure and AWS
- Unlimited access to EPAM's internal learning database
- Free English classes with certified teachers
- We cover it all
- Participation in the Employee Stock Purchase Plan
- Monetary bonuses for engaging in the referral program
- Comprehensive medical & family care package
- Four trust days per year for personal needs
- Discounts for fitness clubs
- Benefits package (hotels, restaurants, stores and services)
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.
Это сохранённая копия объявления, опубликованного в другом месте. Вакансии снимают без предупреждения — перед откликом проверьте сайт работодателя. mentors.coach не является нанимающей стороной.