Description review

Senior Network Engineer

EPAM Systems · Anywhere in the World · back to the listing

HR standards

63/100

needs work

Title ↔ description

89/100

strong

Reads as

Network Engineer

100% confident

What this role officially is

ICT network engineer — ESCO, the EU occupation classification

ICT network engineers implement, maintain and support computer networks. They also perform network modelling, analysis, and planning. They may also design network and computer security measures. They may research and recommend network and data communications hardware and software.

Also known as: network configurator, networks engineer, networks developer, network developer, networks designer, network engineers

How others title the same work

Large employers

  • Open Source Networking Software Engineer - ToR Switch / SmartNIC / DPU Canonical
  • Senior Network Engineer Twilio

Startups

  • FlixTrain | Technical Expert Onboard Connectivity | Berlin, Germany | ONSITE (hybrid) | Full-time FlixTrain

What the listing never says

  • 17 bullet points. Long requirement lists deter qualified candidates, who read them as hard gates. Scope clarity
  • No pay range published. Candidates cannot tell whether applying is worth their time. Pay transparency

The listing, marked up

Nothing in the wording of this listing tripped a check. The scores above still judge how complete and coherent it is.

Headquarters: Belarus

URL: http://epam.com

We are seeking a Senior Network Engineer to join our engagement on the delivery of a Unified Automation Platform — an Internal Developer Platform (IDP) that standardizes new-project delivery, centralizes access to development resources, and enables software creation through templates and golden paths.

In this role, you will contribute to the Network/Firewalls automation stream, building modules on a modern toolchain (Terraform/OpenTofu for IaC and Ansible for CaC) with AI-assisted development using GitHub Copilot as a standard practice.

Responsibilities

• Implement and maintain firewall automation modules across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy, certificate binding), following designs defined by the Network Architect
• Build and maintain DNS and NetBox IPAM automation (zone/record management, prefix/role/tenant data entry, reconciliation jobs)
• Deliver Azure core connectivity modules (VNets/subnets, Application Gateway, WAF, Azure Firewall, NSGs) via Terraform/OpenTofu
• Support VMware NSX-T segment and distributed firewall (DFW) rule implementation in coordination with the VMware team
• Execute commit/lock handling procedures for concurrent firewall pipeline changes (PaloAlto/Panorama candidate-config workflows)
• Troubleshoot and remediate production network/firewall issues during Implementation and Adoption, working within change-control processes given the high blast-radius of network changes

Requirements

• 3+ years of hands-on experience in network engineering with a focus on automation
• Background in automating firewall platforms via Infrastructure as Code, including PaloAlto, F5, and Cloudflare
• Expertise in implementing Azure networking constructs (VNets, Application Gateway, WAF) and security components (Azure Firewall, NSGs) via Terraform/OpenTofu
• Knowledge of DNS and IPAM (NetBox) data models and automation
• Familiarity with VMware NSX-T network segmentation and distributed firewall concepts
• Proficiency in Ansible for network/firewall configuration tasks, combined with Terraform/OpenTofu-based provisioning
• Capability to operate within change-control processes for high-blast-radius network/security modifications
• Flexibility to use AI-assisted development with GitHub Copilot (provided project-wide)
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Skills in certificate distribution (Venafi) tied to network/load-balancer endpoints
• Exposure to global traffic management and multi-region failover patterns

To apply: https://weworkremotely.com/remote-jobs/epam-systems-senior-network-engineer

How this was produced

Highlights are found by rule, not by a model: each one is a phrase matched at a known position, and every note is a template we wrote. The two scores come from a typed-decision model (Jev) that reads the listing against the official role definition and real listings for the same role, and returns probabilities rather than prose — it never writes any of the words on this page, and never chooses what to highlight.

Deterministic penalty applied to the HR score: 8 points (from 71 before penalties). Reviewed 29 Sep 2026.