Senior Network & Security Engineer

We are looking for a highly reliable and experienced Senior Network & Security Engineer to join our project team.

The role requires strong hands-on expertise across enterprise networking, security, application delivery, and cloud connectivity. Just as importantly, we are looking for someone who demonstrates ownership, dependability, clear communication, and strong teamwork.

The successful candidate should be comfortable working in a complex production environment, independently troubleshooting issues, implementing changes, and collaborating with senior engineers and other infrastructure, security, application, and cloud teams.

Responsibilities

• Operate and maintain enterprise and data center switching environments, ensuring high availability and redundancy
• Manage and troubleshoot routing in complex production networks, including BGP peering with organization-owned public ASN, Internet transit, and route manipulation
• Administer application delivery platforms, including virtual servers, pools, health monitors, SSL/TLS termination, and persistence configurations
• Support enterprise authentication and authorization services, including RADIUS, TACACS+, and 802.1X policies
• Configure and troubleshoot site-to-site IPsec VPNs, remote access VPNs, and certificate-based authentication
• Implement and maintain firewall policies, NAT, security zones, and VPN integrations across Cisco Secure Firewall platforms
• Design and support hybrid network architectures integrating on-premises infrastructure with AWS, Azure, and OCI
• Take ownership of complex incidents and perform multi-layer troubleshooting across switching, routing, firewalls, VPNs, load balancers, authentication systems, and cloud infrastructure
• Participate in production changes, maintenance windows, change management, incident response, and root-cause analysis
• Analyze packet captures, logs, routing tables, firewall policies, and authentication logs for diagnostic purposes
• Document changes, designs, troubleshooting findings, and operational procedures
• Collaborate with infrastructure, security, application, and cloud teams, escalating issues with useful technical context when needed

Requirements

• 3+ years of hands-on experience in enterprise network and security engineering within complex production environments
• Expertise in Cisco enterprise and data center switching, including Cisco Nexus and Catalyst platforms, along with vPC and NX-OS
• Proficiency in Layer 2 and Layer 3 switching concepts such as VLANs, trunks, and STP/RSTP/MST, as well as LACP/port channels, high-availability designs, and troubleshooting of complex switching and connectivity issues
• Strong background in routing protocols, including OSPF, iBGP, and eBGP, with practical experience in BGP routing policy, prefix filtering, and route redistribution/summarization
• Understanding of Internet peering/transit concepts, BGP advertisements, and operation of networks with organization-owned public ASN
• Skills in F5 BIG-IP / Local Traffic Manager (LTM) or equivalent application delivery platforms, covering virtual servers, pools, health monitors, and profiles, along with SSL/TLS termination, persistence, SNAT, and application traffic troubleshooting
• Competency in Cisco Identity Services Engine (ISE) for RADIUS, TACACS+, and 802.1X, including authentication/authorization policies, device administration, and troubleshooting of auth failures
• Hands-on experience with Cisco VPN technologies, including site-to-site IPsec VPN, Remote Access VPN, and Cisco Secure Client / AnyConnect, with certificate-based authentication and VPN troubleshooting
• Operational expertise in Cisco Secure Firewall / Firepower Threat Defense (FTD) and Cisco Firewall Management Center (FMC), covering Access Control Policies, NAT, and security zones, along with firewall routing, VPN integration, logging, and policy lifecycle management
• Practical knowledge of cloud networking across AWS, Microsoft Azure, and Oracle Cloud Infrastructure (OCI), including VPC/VNet/VCN networking, subnets/routing, and security controls
• Familiarity with site-to-site VPN connectivity, BGP-based cloud connectivity, and private/dedicated cloud links such as AWS Direct Connect, Azure ExpressRoute, and OCI FastConnect
• Strong ownership, dependability, clear communication, and methodical troubleshooting approach, with the ability to work independently and remain calm under high-pressure incidents

Nice to have

• Capability to perform network automation using Python, Ansible, and APIs
• Understanding of Infrastructure as Code and Git-based configuration/change workflows
• Familiarity with network monitoring and observability platforms, DNS, DHCP, and IPAM
• Knowledge of PKI and certificate management, as well as network design documentation and diagrams
• Experience with high-availability and disaster-recovery architectures in large enterprise or service-provider networking environments

We offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more

This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.

Salary range €3.8K-€5.7K gross, based on your experience and interview results.

EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Lithuania to over 1,300+ talented innovators in just 5 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.

Hybrid in Republic of Lithuania