The Cloud Network Security Engineer is a pivotal role in the IT organization, responsible for architecting, implementing, and maintaining complex cloud environments that support the companys critical applications and services. As a Cloud Engineer, you will have be responsible for designing, implementing, and managing network infrastructure within AWS (primary) and Azure (secondary) public cloud environments including on-prem DC to cloud connectivity, multi-cloud connectivity and intra-cloud connectivity. Your expertise will be pivotal in ensuring the reliability, scalability, and security of our cloud-based networks. You will work closely with cross-functional teams to optimize cloud network performance and troubleshoot complex issues. You will also have a strong focus in cloud security focusing both on Cloud Platform and network/perimeter security.
Key Responsibilities:
- Network Design Implementation: Design and implement scalable and secure network architectures in AWS and Azure environments. Ensure integration with existing on-premises networks and cloud services.
- Configuration Management: Configure and manage virtual networks, subnets, VPNs, load balancers, and firewall rules within AWS and Azure. Implement network segmentation and security controls to protect data and applications.
- Performance Optimization: Monitor network performance and troubleshoot issues to maintain high availability and reliability. Optimize network configurations to enhance performance and reduce latency.
- Security Compliance: Implement and manage security policies and practices to protect cloud-based network resources. Ensure compliance with industry standards and company policies.
- Automation Scripting: Develop and maintain automation scripts using tools like Terraform, AWS CloudFormation, or Azure Resource Manager to streamline network provisioning and management tasks.
- Collaboration: Work closely with operations teams, application developers, and system administrators to support and troubleshoot network-related issues. Provide guidance on best practices for cloud network architecture and operations.
- Documentation Reporting: Create and maintain detailed documentation for network configurations, processes, and procedures. Generate reports on network performance, incidents, and resolutions.
- Tier 3 Support - when our CDK operational teams get stuck with a cloud networking issues, you will be the point of escalation.
Qualifications:
- Education: Bachelor s degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent work experience.
- Experience: Minimum of 5-7 years of experience in network engineering with a focus on cloud environments (AWS and Azure).
- Certifications: Relevant certifications such as AWS Certified Solutions Architect, AWS Certified Advanced Networking, AWS or Microsoft Security Specialization, Microsoft Certified: Azure Network Engineer Associate, or similar are highly desirable.
Skills:
- This is a hands-on role. You will be the subject matter expert at CDK for all things AWS networking and security.
- Strong understanding and hands-on use of cloud networking capabilities and services (ex. Routing, VPC s, Transit Gateways, VPN s, Direct Connect, Azure Virtual Network, ExpressRoute).
- Proficiency in network protocols, services and tools (ex. TCP/IP, BGP, DNS, DHCP, HTTP/HTTPS, IPAM, New Relic, etc.).
- Experience with network monitoring (New Relic, CloudWatch) and diagnostic tools. Extensive use of Cloud Watch and log files for forensics and operational remediations.
- Knowledge of network security practices and tools (CSPM tools, firewalls, IDS/IPS, encryption). Deep experience with network design within a public cloud environment with a strong focus on perimeter security.
- Familiarity with automation tools and frameworks (Terraform, AWS CloudFormation, Ansible, Puppet, etc.).
- Excellent problem-solving skills and the ability to troubleshoot complex network issues.
- Strong communication skills with the ability to work collaboratively in a team environment.
- Experience with AWS and Azure Native services like AWS Config, Cloud Watch, Cloud Trail, Route53, Guard Duty, Detective, Inspector, Security Hub, Secrets Server, KMS, AWS Shield, Security Groups, etc.
- Experience with 3rd party tools like Rapid7, Prisma Cloud (CSPM), Wiz, Delinea, etc.
- Experience writing scripts using AWS API to pull data and/or automation cloud admin/governance functions.