Lead Network Security – Cisco SD-LAN

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are seeking a Lead Network Security Engineer specializing in Cisco SD-LAN to lead the deployment and management of advanced LAN infrastructures.

You will oversee planning, configuration, and implementation of campus networks while collaborating closely with clients and cross-functional teams. Join us to drive innovative network security solutions and enhance client experiences.

Responsibilities

• Lead the deployment of Cisco SD-LAN infrastructure in enterprise LAN environments
• Manage configuration and operation of access, distribution, and core switches including fabric edge, border, and control plane nodes
• Design and implement underlay routing protocols such as IS-IS and OSPF alongside overlay technologies including VXLAN, LISP, and SGT within the SD-Access fabric
• Deploy and configure Cisco DNA Center with automation templates, network hierarchy setup, and fabric provisioning
• Integrate Cisco ISE for policy-based segmentation using SGTs and TrustSec features
• Set up and validate fabric-enabled wireless networks including Wireless LAN Controllers and Access Points
• Configure Fusion Nodes to connect the SD-LAN fabric with external networks
• Conduct site readiness assessments and create high-level and low-level design documentation
• Perform testing and validation of network deployments
• Troubleshoot deployment issues at Layer 2, Layer 3, and overlay layers
• Collaborate with cross-functional teams to ensure smooth integration with other systems
• Prepare deployment runbooks and configuration guides for knowledge transfer and support

Requirements

• Expertise in Cisco campus switching, including Catalyst 9000 and 3000 series, with 7 to 12 years of experience
• Strong experience with Cisco ISE and firewall technologies
• Deep understanding of Cisco SD-Access and SD-LAN architecture and components
• Hands-on experience with LISP, VXLAN, SGTs, VRFs, IS-IS, OSPF, and BGP routing protocols
• Experience with network automation using Cisco DNA Center templates and APIs
• Solid knowledge of LAN technologies, including wired and wireless, IP addressing, routing, switching, and network security policies
• Proven leadership skills with experience leading network deployment projects
• Strong analytical and problem-solving abilities
• Fluent English communication skills at a B2+ level

We offer

• Opportunity to work on technical challenges that may impact across geographies
• Vast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certifications
• Opportunity to share your ideas on international platforms
• Sponsored Tech Talks & Hackathons
• Unlimited access to LinkedIn learning solutions
• Possibility to relocate to any EPAM office for short and long-term projects
• Focused individual development
• Benefit package:
  • Health benefits
  • Retirement benefits
  • Paid time off
  • Flexible benefits
• Forums to explore beyond work passion (CSR, photography, painting, sports, etc.)