Ampcus inc

AWS Cloud Firewall SME

Ampcus inc$120K — $150K *
Information Technology
5 - 7 years of experience
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in network engineering or cloud security, with a focus on cloud network architecture for at least 3 years.
  • Deep expertise in AWS Security Services including AWS Network Firewall, Firewall Manager, and WAF.
  • Advanced knowledge of cloud networking technologies such as VPCs and Transit Gateway.
  • Experience with enterprise firewall platforms like Palo Alto or Fortinet within AWS environments.
  • Proficiency in Infrastructure as Code automation tools like Terraform and CloudFormation.
  • Familiarity with monitoring tools like AWS CloudWatch and Security Hub.
  • Relevant certifications, including AWS Certified Security - Specialty and AWS Certified Advanced Networking - Specialty.

Responsibilities

  • Design and implement secure AWS network architectures, focusing on VPC design and hybrid connectivity solutions.
  • Manage centralized firewall configurations and rules across multiple AWS accounts using AWS Firewall Manager.
  • Optimize firewall rules for both AWS Network Firewall and third-party firewalls to ensure secure traffic control.
  • Develop Infrastructure as Code (IaC) templates for automated firewall deployments using Terraform or CloudFormation.
  • Enforce compliance with security standards through periodic audits and reviews of network security rules.
  • Support SOC teams during security incidents with expert analysis and quick containment strategies.

Benefits

  • Opportunity to work with cutting-edge cloud security technologies.
  • Collaborative and innovative team environment.
  • Exposure to a diverse range of business and technology consulting.
  • Potential for professional development and ongoing training.
  • Participation in a culture that values diversity and inclusion.
Full Job Description
Job Title: AWS Cloud Firewall SME.
Location: McLean, VA.

Job Description:
  • Need an AWS Cloud Firewall Subject Matter Expert (SME) focused on the architecture, implementation, and central management of network security across cloud environments.
Core Responsibilities:
  • Security Architecture & Design: Design and implement secure AWS network topologies, including VPC design, routing, and hybrid connectivity (VPN, Direct Connect).
  • Centralized Firewall Management: Act as the primary expert for AWS Firewall Manager to centrally configure and manage rules for AWS WAF, AWS Network Firewall, Shield Advanced, and Security Groups across multiple accounts.
  • Policy Implementation: Maintain and optimize rules for AWS Network Firewall and third-party firewalls (e.g., Palo Alto, Fortinet) to control ingress/egress traffic.
  • Automation (DevSecOps): Develop and manage Infrastructure as Code (IaC) templates using Terraform or CloudFormation to automate firewall deployments and security governance policies.
  • Compliance & Auditing: Enforce network security standards and compliance frameworks (e.g., NIST, CIS, PCI-DSS) by conducting periodic firewall rule audits and access reviews.
  • Incident Support: Act as an SME during network-related security incidents, supporting SOC teams with packet analysis, firewall log investigation, and immediate containment actions.
Required Technical Skills:
  • AWS Security Services: Deep expertise in AWS Network Firewall, Firewall Manager, WAF, Security Groups, NACLs, and AWS Shield.
  • Cloud Networking: Advanced knowledge of VPCs, Transit Gateway, Route 53 Resolver DNS Firewall, and PrivateLink.
  • Third-Party Expertise: Experience with enterprise firewall platforms like Palo Alto Networks, Cisco ASA/Firepower, or Fortinet within AWS.
  • Automation Tools: Proficiency in Terraform, CloudFormation, and scripting (Python, Bash, or PowerShell).
  • Monitoring & Logging: Skilled in using AWS CloudWatch, CloudTrail, and Security Hub for centralized security monitoring.
Preferred Qualifications:
  • Experience: Typically, 5 years in network engineering or cloud security, with at least 3 years specifically in cloud network architecture.
Certifications:
  • AWS Certified Security - Specialty.
  • AWS Certified Advanced Networking - Specialty.
  • Vendor-specific certs like PCNSE (Palo Alto).
Education:
  • Bachelor's degree in computer science, Information Technology, or a related field.

Similar Jobs

More Jobs at Ampcus inc

More Information Technology Jobs

Find similar AWS Cloud Firewall SME jobs: