Description

You will design and implement secure AWS cloud DMZ architectures and manage hybrid connectivity.

Responsibilities

• Build secure DMZ environments in AWS using VPC, Transit Gateway, NACLs, Security Groups, AWS Network Firewall, WAF, and Application Load Balancers.
• Configure ingress and egress traffic flows via NAT Gateways, VPC endpoints, and firewall rules.
• Manage VPC peering, route tables, subnets, and VPN/Direct Connect integrations for hybrid environments.
• Implement monitoring and alerting using AWS CloudWatch, GuardDuty, Security Hub, and Lambda automation.
• Maintain technical documentation for network topology and security configurations.

Required Skills

• 5+ years of experience in cloud infrastructure and security with a focus on AWS.
• Hands-on experience with Palo Alto virtual firewalls (3+ years).
• Deep understanding of Zero Trust Network Architecture (ZTNA) principles.
• Proficiency in networking and perimeter security, including DMZ, IDS/IPS, and firewall management.
• Strong knowledge of TCP/IP, DNS, HTTPS, and VPN technologies.
• Automation and orchestration skills using Python and Bash.
• Experience with Infrastructure as Code (IaC) using Terraform or AWS CloudFormation.
• Familiarity with CI/CD pipelines and DevSecOps practices.

Preferred Skills

• AWS certifications such as Advanced Networking or Security Specialty.
• Experience in regulated industries like finance, healthcare, or government.
• Experience with on-prem to cloud migrations.

Key Skills

Education

Any Graduate