> Markdown version of [/jobs/ext/4648603-chief-site-reliability-engineer](https://www.wearedevelopers.com/jobs/ext/4648603-chief-site-reliability-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Site Reliability Engineer

- **Company:** EPAM Systems, Inc.
- **Location:** Mountain View, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cloud Engineering, Python (Programming Language), Network Security, Network Connections, Routing, Reliability Engineering, Data Logging, Network Switches, Network Routers, Google Cloud, Amazon Virtual Private Cloud (VPC), Git, Infrastructure Automation Frameworks, Data Analytics, Firewall Services Module, Terraform
- **Published:** November 9, 2026
- **Apply:** https://www.juju.com/job/28_25197_407526cabb2d7f5a57be6807310e0be6

## About the Role

In parallel, we're creating internal tooling that transforms live network data into clear, actionable insight during incident response.ResponsibilitiesBuild and adjust cloud network configurations through Terraform, encompassing VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access using Private Service Connect, PrivateLink, or Private Endpoints, plus the routing linking all these pieces togetherAdminister private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, together with the BGP sessions running across them, handling circuit provisioning, routing policy tuning, and failover validationGovern firewall policy spanning cloud-native firewalls as well as Palo Alto NGFWs operated via Panorama, managing every change from initial review through final deploymentMaintain the secure access technology suite, including Zscaler, Menlo Security browser isolation, Tailscale, and
the PAC files that route traffic among them, while implementing policy changes and troubleshooting connectivity concerns for usersAddress connectivity and performance problems by examining flow logs, firewall logs, BGP state information, and synthetic monitoring output from platforms such as ThousandEyes, participating in on-call duties and documenting discoveriesImprove and expand Python-based tooling used to compare live network state against the desired configurationAssess merge requests submitted by team members and keep runbooks and design documentation current and accurateRequirementsA minimum of 7 years of relevant network engineering background, including direct experience building production-grade networks within a public cloud platform such as GCP, AWS, or Azure, with strong depth in one platform and a willingness to expand into others considered sufficientAt least 2 years spent managing or directing development teamsFirm grasp of routing principles, including explaining how
BGP arrives at a best path, how elements like AS-path, MED, and local preference shape that decision, and how to pinpoint why an anticipated route is missingHands-on familiarity with Terraform or equivalent infrastructure-as-code tools used within a Git-based review processDemonstrated experience with network security mechanisms, including firewall rules, security groups, NAT, and segmentation strategiesAdequate Python competency to automate recurring tasks or extract data via a cloud APIA disciplined, data-driven troubleshooting methodology, involving forming hypotheses, validating them against evidence, and logging resultsExcellent writing ability, producing change plans, incident documentation, and reference materials that fellow engineers can trustUpper-Intermediate English language competency (B2)Nice to haveKnowledge of Google Cloud networking features such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and

## Description

We also own the secure access layer that connects our employees to the internet and to internal systems, relying on Zscaler, Menlo Security, and Tailscale.Currently, we're in the process of building a new hub-and-spoke network inside Google Cloud and linking it with the broader environment.