Description

•             Design, develop, and implement cloud network security capabilities across public and private cloud platforms.

•             Engineer and automate network security controls including on-premises firewalls, cloud firewalls, security groups, network ACLs, and cloud-native security services.

•             Build and maintain Infrastructure-as-Code (Terraform, CloudFormation, or similar) to deploy secure cloud networking environments.

•             Collaborate with Cloud Engineering, Network Engineering, and Security Architecture teams to implement secure hybrid connectivity between on-premises and cloud environments.

•             Support secure connectivity solutions including VPN, Direct Connect, ExpressRoute, Transit Gateway, VPC/VNet peering, Private Link, and service mesh technologies.

•             Conduct proof-of-concept evaluations of emerging cloud networking and security technologies.

•             Partner with Security Operations and Incident Response teams to improve network visibility, logging, monitoring, and threat detection.

•             Participate in architecture reviews to ensure cloud applications and infrastructure comply with enterprise security standards.

•             Identify opportunities to improve operational efficiency through automation and security orchestration.

Generic Managerial Skills, If any

•             5+ years of experience in Network Security, Cloud Security, or Infrastructure Security engineering.

•             Experience designing and securing networking in AWS, Azure, Google, or Oracle Cloud Platform.

•             Strong understanding of core cloud-native networking and security concepts, including VPCs and VNets, routing, segmentation, load balancing, private connectivity, identity-aware access, encryption, and network policy enforcement.

•             Experience leveraging AI tools to enhance productivity, automate engineering tasks, and accelerate the delivery of secure cloud networking solutions.

•             Experience with Infrastructure-as-Code tools such as Terraform or CloudFormation.

•             Familiarity with security monitoring, SIEM integration, logging, and network telemetry.

•             Familiarity with enterprise network security technologies such as next-generation firewalls, web application firewalls, secure web gateways, DNS security, IDS/IPS, network segmentation, and zero trust network access.

•             Experience designing, securing, and supporting Software-as-a-Service (SaaS) environments and integrations, including secure connectivity, identity-aware access, API security, and SaaS security best practices.

•             Familiarity with SaaS security solutions such as CASB, Secure Service Edge (SSE), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA) to protect enterprise users and cloud-based applications.

•             Experience integrating SaaS platforms with enterprise identity providers (Azure AD/Entra ID, Okta, Ping Identity, or similar) using SAML, OAuth, and OpenID Connect (OIDC).

•             Experience securing access to enterprise SaaS applications through conditional access policies, network segmentation, and cloud-native security controls.

•             Experience supporting large-scale enterprise cloud migrations.

Preferred certifications include:

•             AWS Certified Security – Specialty

•             AWS Advanced Networking – Specialty

•             Azure Network Engineer Associate

•             Azure Security Engineer Associate

•             Google Professional Cloud Network Engineer

•             Google Professional Cloud Security Engineer

•             CCNP Security or equivalent

Key Skills

Education

Bachelor's degree