{"id":3729079,"url":"https://alion.io/job/epam-systems-senior-network-security-engineer","title":"Senior Network & Security Engineer","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":50,"open_postings":66,"ghost_share":0.788,"stale_share":0,"repost_share":0.182,"time_to_fill_p50_days":31,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania","Kaunas, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3800,"max":5700,"currency":"EUR","period":"month","gross":true,"usd_annual":76596},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"OSPF","optional":false},{"name":"VPN","optional":false},{"name":"Ansible","optional":true},{"name":"DHCP","optional":true},{"name":"DNS","optional":true},{"name":"Git","optional":true},{"name":"PKI","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-04T02:41:08Z","employer_posted_date":null,"last_verified_at":"2026-11-04T02:41:08Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\nWe are looking for a highly reliable and experienced Senior Network & Security Engineer to join our project team.\n\nThe role requires strong hands-on expertise across enterprise networking, security, application delivery, and cloud connectivity. Just as importantly, we are looking for someone who demonstrates ownership, dependability, clear communication, and strong teamwork.\n\nThe successful candidate should be comfortable working in a complex production environment, independently troubleshooting issues, implementing changes, and collaborating with senior engineers and other infrastructure, security, application, and cloud teams.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nOperate and maintain enterprise and data center switching environments, ensuring high availability and redundancy\n\nManage and troubleshoot routing in complex production networks, including BGP peering with organization-owned public ASN, Internet transit, and route manipulation\n\nAdminister application delivery platforms, including virtual servers, pools, health monitors, SSL/TLS termination, and persistence configurations\n\nSupport enterprise authentication and authorization services, including RADIUS, TACACS+, and 802.1X policies\n\nConfigure and troubleshoot site-to-site IPsec VPNs, remote access VPNs, and certificate-based authentication\n\nImplement and maintain firewall policies, NAT, security zones, and VPN integrations across Cisco Secure Firewall platforms\n\nDesign and support hybrid network architectures integrating on-premises infrastructure with AWS, Azure, and OCI\n\nTake ownership of complex incidents and perform multi-layer troubleshooting across switching, routing, firewalls, VPNs, load balancers, authentication systems, and cloud infrastructure\n\nParticipate in production changes, maintenance windows, change management, incident response, and root-cause analysis\n\nAnalyze packet captures, logs, routing tables, firewall policies, and authentication logs for diagnostic purposes\n\nDocument changes, designs, troubleshooting findings, and operational procedures\n\nCollaborate with infrastructure, security, application, and cloud teams, escalating issues with useful technical context when needed\n\nRequirements\n\n3+ years of hands-on experience in enterprise network and security engineering within complex production environments\n\nExpertise in Cisco enterprise and data center switching, including Cisco Nexus and Catalyst platforms, along with vPC and NX-OS\n\nProficiency in Layer 2 and Layer 3 switching concepts such as VLANs, trunks, and STP/RSTP/MST, as well as LACP/port channels, high-availability designs, and troubleshooting of complex switching and connectivity issues\n\nStrong background in routing protocols, including OSPF, iBGP, and eBGP, with practical experience in BGP routing policy, prefix filtering, and route redistribution/summarization\n\nUnderstanding of Internet peering/transit concepts, BGP advertisements, and operation of networks with organization-owned public ASN\n\nSkills in F5 BIG-IP / Local Traffic Manager (LTM) or equivalent application delivery platforms, covering virtual servers, pools, health monitors, and profiles, along with SSL/TLS termination, persistence, SNAT, and application traffic troubleshooting\n\nCompetency in Cisco Identity Services Engine (ISE) for RADIUS, TACACS+, and 802.1X, including authentication/authorization policies, device administration, and troubleshooting of auth failures\n\nHands-on experience with Cisco VPN technologies, including site-to-site IPsec VPN, Remote Access VPN, and Cisco Secure Client / AnyConnect, with certificate-based authentication and VPN troubleshooting\n\nOperational expertise in Cisco Secure Firewall / Firepower Threat Defense (FTD) and Cisco Firewall Management Center (FMC), covering Access Control Policies, NAT, and security zones, along with firewall routing, VPN integration, logging, and policy lifecycle management\n\nPractical knowledge of cloud networking across AWS, Microsoft Azure, and Oracle Cloud Infrastructure (OCI), including VPC/VNet/VCN networking, subnets/routing, and security controls\n\nFamiliarity with site-to-site VPN connectivity, BGP-based cloud connectivity, and private/dedicated cloud links such as AWS Direct Connect, Azure ExpressRoute, and OCI FastConnect\n\nStrong ownership, dependability, clear communication, and methodical troubleshooting approach, with the ability to work independently and remain calm under high-pressure incidents\n\nNice to have\n\nCapability to perform network automation using Python, Ansible, and APIs\n\nUnderstanding of Infrastructure as Code and Git-based configuration/change workflows\n\nFamiliarity with network monitoring and observability platforms, DNS, DHCP, and IPAM\n\nKnowledge of PKI and certificate management, as well as network design documentation and diagrams\n\nExperience with high-availability and disaster-recovery architectures in large enterprise or service-provider networking environments\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":6215,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-04T06:57:50Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":31,"reasons":["seen:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":76596,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-senior-network-security-engineer","json_url":"https://alion.io/job/epam-systems-senior-network-security-engineer.json","meta":{"generated_at":"2026-11-06T06:56:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12314,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-senior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-senior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-senior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-senior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-senior-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3729079}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3729079},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}