Lead Network Engineer
⚲ Lodz
Do uzgodnienia
Wymagania
- BGP
- citrix netscaler
- vpc
- VXLAN
- Cisco Nexus
- F5 BIG-IP
- Cisco ACI
Opis stanowiska
We are seeking an experienced Lead Network Engineer to own architecture, security, product design, automation and innovation across global production datacenter environments. In this role, you will lead a global Cisco ACI fabric while driving secure, scalable and highly available network solutions that align with business consumption models.
This role requires working in a hybrid mode from any office in Krakow, Wroclaw, Katowice, Warsaw, Gdansk, Lodz or Poznan 3 times a week.
Responsibilities
• Serve as lead engineer for a global Cisco ACI fabric, owning architecture, security, product and service design, automation and innovation across production datacenter environments
• Define product descriptions and tiered service offerings for ADC and DCLAN services (Bronze/Silver/Gold), including explicit SLOs for availability, failover time and change-request lead time; maintain service catalog alignment to business consumption models
• Design and implement secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate and F5 without production impact; identify and document platform constraints impacting VRF remap behavior
• Architect and deliver F5 BIG-IP Dual-PBR No-SNAT migrations on ACI 6.0, producing validated configuration bundles, automated deployment scripts and validation documentation
• Drive ACI ESG micro-segmentation strategy and migration execution, including phased contract design; build Python tooling for tenant migration validation and configuration generation
• Design Cilium BGP L3Out integration for Kubernetes workloads on ACI, including BFD tuning for VMware compatibility and route-map controls to prevent pod CIDR leakage into the fabric VRF
• Build hybrid IaC pipelines (Terraform Day-1, Ansible/AWX Day-2) for F5 BIG-IP LTM/SSL services with tiered service models and ServiceNow-triggered provisioning
• Ensure operational excellence by sustaining high fabric availability, reducing unscheduled outages, meeting aggressive CVE patch timelines and maintaining strong zero-trust segmentation audit scores
Requirements
• 5+ years of experience in network engineering within datacenter environments
• Expertise in Cisco ACI (Multi-Pod, Multi-Site, ESG, PBR Service Graphs, APIC REST API)
• Proficiency in Nexus 9K/7K/5K, VXLAN and vPC
• Skills in F5 BIG-IP (LTM, GTM/DNS, iRules, PBR, DSR, SNAT/No-SNAT)
• Knowledge of Citrix NetScaler
• English proficiency at B2 level or higher
Nice to have
• Background in Terraform, Ansible/AWX and Python
• Familiarity with GitLab CI/CD, GitHub Actions and Azure DevOps Pipelines
We offer
• We gather like-minded people:Engineering community of industry professionals
• Friendly team and enjoyable working environment
• Flexible schedule and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:Outstanding career roadmap
• Leadership development, career advising, soft skills, and well-being programs
• Certification (GCP, Azure, AWS)
• Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
• English classes
• We cover it all:Stable income (Employment Contract or B2B)
• Participation in the Employee Stock Purchase Plan
• Benefits package (health insurance, multisport, shopping vouchers)
• Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
• Referral bonuses
• Corporate, social and well-being events
• Please, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
• We will reach out to selected candidates exclusively.
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
This role requires working in a hybrid mode from any office in Krakow, Wroclaw, Katowice, Warsaw, Gdansk, Lodz or Poznan 3 times a week.
Responsibilities
• Serve as lead engineer for a global Cisco ACI fabric, owning architecture, security, product and service design, automation and innovation across production datacenter environments
• Define product descriptions and tiered service offerings for ADC and DCLAN services (Bronze/Silver/Gold), including explicit SLOs for availability, failover time and change-request lead time; maintain service catalog alignment to business consumption models
• Design and implement secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate and F5 without production impact; identify and document platform constraints impacting VRF remap behavior
• Architect and deliver F5 BIG-IP Dual-PBR No-SNAT migrations on ACI 6.0, producing validated configuration bundles, automated deployment scripts and validation documentation
• Drive ACI ESG micro-segmentation strategy and migration execution, including phased contract design; build Python tooling for tenant migration validation and configuration generation
• Design Cilium BGP L3Out integration for Kubernetes workloads on ACI, including BFD tuning for VMware compatibility and route-map controls to prevent pod CIDR leakage into the fabric VRF
• Build hybrid IaC pipelines (Terraform Day-1, Ansible/AWX Day-2) for F5 BIG-IP LTM/SSL services with tiered service models and ServiceNow-triggered provisioning
• Ensure operational excellence by sustaining high fabric availability, reducing unscheduled outages, meeting aggressive CVE patch timelines and maintaining strong zero-trust segmentation audit scores
Requirements
• 5+ years of experience in network engineering within datacenter environments
• Expertise in Cisco ACI (Multi-Pod, Multi-Site, ESG, PBR Service Graphs, APIC REST API)
• Proficiency in Nexus 9K/7K/5K, VXLAN and vPC
• Skills in F5 BIG-IP (LTM, GTM/DNS, iRules, PBR, DSR, SNAT/No-SNAT)
• Knowledge of Citrix NetScaler
• English proficiency at B2 level or higher
Nice to have
• Background in Terraform, Ansible/AWX and Python
• Familiarity with GitLab CI/CD, GitHub Actions and Azure DevOps Pipelines
We offer
• We gather like-minded people:Engineering community of industry professionals
• Friendly team and enjoyable working environment
• Flexible schedule and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:Outstanding career roadmap
• Leadership development, career advising, soft skills, and well-being programs
• Certification (GCP, Azure, AWS)
• Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
• English classes
• We cover it all:Stable income (Employment Contract or B2B)
• Participation in the Employee Stock Purchase Plan
• Benefits package (health insurance, multisport, shopping vouchers)
• Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
• Referral bonuses
• Corporate, social and well-being events
• Please, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
• We will reach out to selected candidates exclusively.
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
🔍 Dekoder Ogłoszenia
🔴
own architecture, security, product design, automation and innovation
Oczekuje się, że będziesz odpowiedzialny za szeroki zakres zadań, od projektowania po wdrażanie i innowacje, co może oznaczać dużą odpowiedzialność i brak jasno zdefiniowanych granic.
🟡
lead a global Cisco ACI fabric
Będziesz zarządzał i kierował pracą nad globalną infrastrukturą Cisco ACI, co może oznaczać zarządzanie zespołem lub projektami na dużą skalę.
🟢
driving secure, scalable and highly available network solutions that align with business consumption models
Oczekuje się, że będziesz tworzył rozwiązania sieciowe, które są nie tylko bezpieczne i wydajne, ale także dopasowane do sposobu, w jaki biznes korzysta z usług.
🟡
Define product descriptions and tiered service offerings for ADC and DCLAN services (Bronze/Silver/Gold), including explicit SLOs for availability, failover time and change-request lead time
Będziesz musiał zdefiniować i udokumentować poziomy usług sieciowych, co wymaga precyzji i zrozumienia potrzeb biznesowych.
🟡
Design and implement secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate and F5 without production impact
Będziesz projektował i wdrażał zaawansowane rozwiązania do odzyskiwania po awarii, co wymaga głębokiej wiedzy technicznej i umiejętności pracy z różnymi narzędziami.