Network Security Cloud Engineering

Job ID	423888
Job Title	Network Security Cloud Engineering
Skill	EIS : Network Engineer
Location	Phoenix, AZ

Network Security Cloud Engineering

Must Have Technical/Functional Skills

Secure cloud connectivity,

firewall and policy automation,

cloud-native network controls,

and operational support for enterprise-scale hybrid environments

Roles & Responsibilities

Design, develop, and implement cloud network security capabilities across public and private cloud platforms.

Engineer and automate network security controls including on-premises firewalls, cloud firewalls, security groups, network ACLs, and cloud-native security services.

Build and maintain Infrastructure-as-Code (Terraform, CloudFormation, or similar) to deploy secure cloud networking environments.

Collaborate with Cloud Engineering, Network Engineering, and Security Architecture teams to implement secure hybrid connectivity between on-premises and cloud environments.

Support secure connectivity solutions including VPN, Direct Connect, ExpressRoute, Transit Gateway, VPC/VNet peering, Private Link, and service mesh technologies.

Conduct proof-of-concept evaluations of emerging cloud networking and security technologies.

Partner with Security Operations and Incident Response teams to improve network visibility, logging, monitoring, and threat detection.

Participate in architecture reviews to ensure cloud applications and infrastructure comply with enterprise security standards.

Identify opportunities to improve operational efficiency through automation and security orchestration.

Generic Managerial Skills, If any

5+ years of experience in Network Security, Cloud Security, or Infrastructure Security engineering.

Experience designing and securing networking in AWS, Azure, Google, or Oracle Cloud Platform.

Strong understanding of core cloud-native networking and security concepts, including VPCs and VNets, routing, segmentation, load balancing, private connectivity, identity-aware access, encryption, and network policy enforcement.

Experience leveraging AI tools to enhance productivity, automate engineering tasks, and accelerate the delivery of secure cloud networking solutions.

Experience with Infrastructure-as-Code tools such as Terraform or CloudFormation.

Familiarity with security monitoring, SIEM integration, logging, and network telemetry.

Familiarity with enterprise network security technologies such as next-generation firewalls, web application firewalls, secure web gateways, DNS security, IDS/IPS, network segmentation, and zero trust network access.

Experience designing, securing, and supporting Software-as-a-Service (SaaS) environments and integrations, including secure connectivity, identity-aware access, API security, and SaaS security best practices.

Familiarity with SaaS security solutions such as CASB, Secure Service Edge (SSE), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA) to protect enterprise users and cloud-based applications.

Experience integrating SaaS platforms with enterprise identity providers (Azure AD/Entra ID, Okta, Ping Identity, or similar) using SAML, OAuth, and OpenID Connect (OIDC).

Experience securing access to enterprise SaaS applications through conditional access policies, network segmentation, and cloud-native security controls.

Experience supporting large-scale enterprise cloud migrations.

Preferred certifications include:

AWS Certified Security Specialty

AWS Advanced Networking Specialty

Azure Network Engineer Associate

Azure Security Engineer Associate

Google Professional Cloud Network Engineer

Google Professional Cloud Security Engineer

CCNP Security or equivalent