Lead Network Engineer

We are seeking an experienced Lead Network Engineer to own architecture, security, product design, automation and innovation across global production datacenter environments. In this role, you will lead a global Cisco ACI fabric while driving secure, scalable and highly available network solutions that align with business consumption models. This role requires working in a hybrid mode from any office in Krakow, Wroclaw, Katowice, Warsaw, Gdansk, Lodz or Poznan 3 times a week. Responsibilities Serve as lead engineer for a global Cisco ACI fabric, owning architecture, security, product and service design, automation and innovation across production datacenter environmentsDefine product descriptions and tiered service offerings for ADC and DCLAN services (Bronze/Silver/Gold), including explicit SLOs for availability, failover time and change-request lead time; maintain service catalog alignment to business consumption modelsDesign and implement secure incident recovery environments using ACI VRF remap as the containment primitive to enable isolated failover testing across Firepower, FortiGate and F5 without production impact; identify and document platform constraints impacting VRF remap behaviorArchitect and deliver F5 BIG-IP Dual-PBR No-SNAT migrations on ACI 6.0, producing validated configuration bundles, automated deployment scripts and validation documentationDrive ACI ESG micro-segmentation strategy and migration execution, including phased contract design; build Python tooling for tenant migration validation and configuration generationDesign Cilium BGP L3Out integration for Kubernetes workloads on ACI, including BFD tuning for VMware compatibility and route-map controls to prevent pod CIDR leakage into the fabric VRFBuild hybrid IaC pipelines (Terraform Day-1, Ansible/AWX Day-2) for F5 BIG-IP LTM/SSL services with tiered service models and ServiceNow-triggered provisioningEnsure operational excellence by sustaining high fabric availability, reducing unscheduled outages, meeting aggressive CVE patch timelines and maintaining strong zero-trust segmentation audit scores Requirements 5+ years of experience in network engineering within datacenter environmentsExpertise in Cisco ACI (Multi-Pod, Multi-Site, ESG, PBR Service Graphs, APIC REST API)Proficiency in Nexus 9K/7K/5K, VXLAN and vPCSkills in F5 BIG-IP (LTM, GTM/DNS, iRules, PBR, DSR, SNAT/No-SNAT)Knowledge of Citrix NetScalerEnglish proficiency at B2 level or higher Nice to have Background in Terraform, Ansible/AWX and PythonFamiliarity with GitLab CI/CD, GitHub Actions and Azure DevOps Pipelines We offer We gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusively EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.