--- title: Network Architect at EPAM Systems description: We are seeking a Network Architect to design and govern enterprise network infrastructure across Azure, on-premises VMware environments, and multi-vendor security platforms, ensuring a scalable, secur --- # Network Architect **Company:** EPAM Systems **Location:** Georgia **Posted:** 2026-09-03 **Apply by:** 2026-10-18 **Tags:** architect [Apply / View original posting](https://www.linkedin.com/jobs/view/4461697902) ## Job description We are seeking a Network Architect to design and govern enterprise network infrastructure across Azure, on-premises VMware environments, and multi-vendor security platforms, ensuring a scalable, secure, and automated foundation for hybrid connectivity and network operations. Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi. Responsibilities Design the core network connectivity foundation — Azure VNets/subnets, Application Gateway, WAF, and Azure Firewall with NSGs and Route Tables — as the foundational layer that all other Azure automation modules depend on Architect the DNS and NetBox IPAM integration: internal zones/records, public authoritative DNS, and the prefix/role/tenant/site/VRF data model, reconciling existing on-premises and Azure network estate data into a single source of truth Design multi-vendor firewall automation architecture across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy attachment, certificate binding), including commit/lock handling for concurrent pipeline execution Architect VMware NSX-T network segments (segments/T1 routers), distributed firewall (DFW) rules/groups/tags, and load balancing/NAT, ensuring addressing consistency with NetBox Define hybrid connectivity architecture for Azure VMware Solution (AVS)/ExpressRoute, ensuring consistent routing and security posture between on-premises, VMware, and Azure environments Contribute network-architecture input to next-phase capabilities identified in the roadmap, including global traffic management/multi-region patterns and additional infrastructure modules (SSE/ZTNA, BGP/routing) Partner with the Azure Architect, VMware Architect, and Integration Architect (Security Focus) to ensure network design aligns with identity, certificate, and secrets architecture Provide architectural governance for network and firewall change control, given the high blast-radius nature of these changes, and support production validation during Implementation and Adoption Requirements 2+ years of enterprise network architecture experience across Azure networking (VNets, Application Gateway, WAF, Azure Firewall, NSGs) and network/security platforms (PaloAlto, F5) Experience automating network infrastructure via Infrastructure as Code (Terraform/OpenTofu), including complex modules for firewalls and application delivery controllers Understanding of DNS architecture (split-horizon, internal/public authoritative) and IP address management (IPAM) tooling such as NetBox Familiarity with VMware NSX-T network segmentation and distributed firewall policy modeling Experience designing hybrid on-premises-to-cloud connectivity, including ExpressRoute-based patterns Ability to operate within change-control processes for high-blast-radius network and security modifications Proficiency in English at a B2+ level Nice to have Experience with Cloudflare for VIP/pool, WAF policy, and certificate-binding automation Familiarity with global traffic management/multi-region failover patterns (active/passive) Exposure to SSE/ZTNA architectures and BGP-based routing modules Experience integrating network provisioning with a self-service developer portal (Backstage or equivalent) Familiarity with certificate distribution (Venafi) tied to network and load-balancer endpoints We offer We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Five trust days per year (sick leave without a medical certificate) Benefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments. --- 🔔 [Monitor similar jobs on Gurify](https://gurify.com/?utm_source=techgeo&utm_medium=jobboard&utm_campaign=monitor_similar&role=Network+Architect) — get alerted when matching roles are posted in Georgia. ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Network Architect","description":"

We are seeking a Network Architect to design and govern enterprise network infrastructure across Azure, on-premises VMware environments, and multi-vendor security platforms, ensuring a scalable, secure, and automated foundation for hybrid connectivity and network operations. Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi. Responsibilities Design the core network connectivity foundation — Azure VNets/subnets, Application Gateway, WAF, and Azure Firewall with NSGs and Route Tables — as the foundational layer that all other Azure automation modules depend on Architect the DNS and NetBox IPAM integration: internal zones/records, public authoritative DNS, and the prefix/role/tenant/site/VRF data model, reconciling existing on-premises and Azure network estate data into a single source of truth Design multi-vendor firewall automation architecture across PaloAlto, F5, and Cloudflare (security rules, address/service objects, NAT, VIP/pool configuration, WAF policy attachment, certificate binding), including commit/lock handling for concurrent pipeline execution Architect VMware NSX-T network segments (segments/T1 routers), distributed firewall (DFW) rules/groups/tags, and load balancing/NAT, ensuring addressing consistency with NetBox Define hybrid connectivity architecture for Azure VMware Solution (AVS)/ExpressRoute, ensuring consistent routing and security posture between on-premises, VMware, and Azure environments Contribute network-architecture input to next-phase capabilities identified in the roadmap, including global traffic management/multi-region patterns and additional infrastructure modules (SSE/ZTNA, BGP/routing) Partner with the Azure Architect, VMware Architect, and Integration Architect (Security Focus) to ensure network design aligns with identity, certificate, and secrets architecture Provide architectural governance for network and firewall change control, given the high blast-radius nature of these changes, and support production validation during Implementation and Adoption Requirements 2+ years of enterprise network architecture experience across Azure networking (VNets, Application Gateway, WAF, Azure Firewall, NSGs) and network/security platforms (PaloAlto, F5) Experience automating network infrastructure via Infrastructure as Code (Terraform/OpenTofu), including complex modules for firewalls and application delivery controllers Understanding of DNS architecture (split-horizon, internal/public authoritative) and IP address management (IPAM) tooling such as NetBox Familiarity with VMware NSX-T network segmentation and distributed firewall policy modeling Experience designing hybrid on-premises-to-cloud connectivity, including ExpressRoute-based patterns Ability to operate within change-control processes for high-blast-radius network and security modifications Proficiency in English at a B2+ level Nice to have Experience with Cloudflare for VIP/pool, WAF policy, and certificate-binding automation Familiarity with global traffic management/multi-region failover patterns (active/passive) Exposure to SSE/ZTNA architectures and BGP-based routing modules Experience integrating network provisioning with a self-service developer portal (Backstage or equivalent) Familiarity with certificate distribution (Venafi) tied to network and load-balancer endpoints We offer We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Five trust days per year (sick leave without a medical certificate) Benefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

","identifier":{"@type":"PropertyValue","name":"TechGeo","value":"4461697902"},"url":"https://techgeo.ge/job/network-architect-0e85a2d","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Georgia","addressCountry":"GE"}},"hiringOrganization":{"@type":"Organization","name":"EPAM Systems"},"directApply":false,"datePosted":"2026-09-03","validThrough":"2026-10-18T23:59:59+04:00"} ```