Lead Network Engineer

We are seeking a Lead Network Engineer to design, implement, and maintain firewall automation, network connectivity, and IPAM/DNS solutions across multi-cloud and on-premises environments. The successful candidate will work closely with Network Architects and cross-functional teams to deliver secure, scalable, and automated network infrastructure while operating within strict change-control processes.

Responsibilities

• Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare, including security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, and certificate binding, following designs defined by the Network Architect
• Build and maintain DNS and NetBox IPAM automation, including zone/record management, prefix/role/tenant data entry, and reconciliation jobs
• Implement Azure core connectivity modules such as VNets/subnets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
• Execute commit/lock handling procedures for concurrent firewall pipeline changes, including PaloAlto/Panorama candidate-config workflows
• Troubleshoot and remediate production network/firewall issues during Implementation and Adoption phases
• Operate within change-control processes given the high blast-radius of network changes

Requirements

• 5+ years of hands-on experience automating firewall platforms such as PaloAlto, F5, and/or Cloudflare via Infrastructure as Code
• Experience implementing Azure networking constructs, including VNets, Application Gateway, WAF, Azure Firewall, and NSGs via Terraform/OpenTofu
• Working knowledge of DNS and IPAM (NetBox) data models and automation
• Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
• Ability to operate within change-control processes for high-blast-radius network/security modifications
• Working experience with Ansible for network/firewall configuration tasks, complementing Terraform/OpenTofu-based provisioning, with combined Terraform/Ansible proficiency expected
• Flexibility to use AI-assisted tools such as GitHub Copilot in a project-wide capacity
• Proficiency in English at a B2+ level

Nice to have

• Experience with certificate distribution (Venafi) tied to network/load-balancer endpoints
• Exposure to global traffic management/multi-region failover patterns

We offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more

This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.

Salary range €3.7K-€5.2K gross, based on your experience and interview results.

EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Lithuania to over 1,300+ talented innovators in just 5 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.

Hybrid in Republic of Lithuania