Description

You will act as the Subject Matter Expert for AWS Cloud Firewall architecture, implementation, and centralized network security management. This role is on-site.

Responsibilities

• Design and implement secure AWS network topologies, including VPC design, routing, and hybrid connectivity.
• Manage rules for AWS WAF, AWS Network Firewall, Shield Advanced, and Security Groups using AWS Firewall Manager across multiple accounts.
• Maintain and optimize ingress/egress traffic rules for AWS Network Firewall and third-party firewalls (Palo Alto, Fortinet).
• Develop and manage Infrastructure as Code templates using Terraform or CloudFormation to automate firewall deployments.
• Enforce network security standards (NIST, CIS, PCI-DSS) by conducting periodic firewall rule audits and access reviews.

Required Skills

• Deep expertise in AWS Network Firewall, Firewall Manager, WAF, Security Groups, NACLs, and AWS Shield.
• Advanced knowledge of VPCs, Transit Gateway, Route 53 Resolver DNS Firewall, and PrivateLink.
• Experience with enterprise firewalls like Palo Alto Networks, Fortinet, or Cisco ASA/Firepower within AWS.
• Proficiency in Terraform, CloudFormation, and scripting languages including Python, Bash, or PowerShell.
• Skilled in using AWS CloudWatch, CloudTrail, and Security Hub for centralized security monitoring.
• Minimum 5 years in network engineering or cloud security.
• At least 3 years specifically focused on cloud network architecture.

Key Skills

Education

Any Graduate