Job Summary
We are seeking a highly experienced Network Security Cloud Engineer to lead the modernization and security enhancement of a large-scale AWS cloud firewall environment. This role supports a strategic initiative focused on consolidating traditional network infrastructure and cloud security operations as the organization transitions from on-premises data centers to a cloud-first architecture. The individual will serve as the team's primary cloud firewall subject matter expert, assessing the current security posture, implementing best practices, automating deployments, and mentoring network engineers on cloud security operations.
Key Responsibilities
• Assess and document the existing AWS firewall and cloud security environment.
• Design, configure, and optimize AWS WAF and related cloud security controls.
• Review existing firewall policies, rules, and frameworks and implement improvements to strengthen the security posture.
• Lead modernization efforts for legacy cloud security solutions and align them with current best practices.
• Develop scalable, repeatable deployment processes using automation and Infrastructure as Code (IaC).
• Collaborate with network engineering teams to bridge traditional networking concepts with cloud-native security practices.
• Configure and manage traffic routing, load balancing, and firewall integrations across cloud environments.
• Perform security enhancements and testing in non-production environments.
• Provide knowledge transfer, coaching, and documentation to support long-term team self-sufficiency.
• Serve as both a hands-on technical contributor and technical leader throughout the engagement.
Required Qualifications
• Extensive hands-on experience implementing and administering AWS WAF in enterprise environments.
• Proven experience designing and configuring cloud firewall environments from the ground up.
• Strong understanding of cloud security architecture, firewall policy management, and network security principles.
• Experience securing and automating AWS environments using Infrastructure as Code methodologies.
• Expertise in AWS networking and security services, firewall rule creation and optimization, traffic routing and inspection, load balancing technologies, and API security concepts.
• Ability to evaluate existing environments and develop remediation and modernization strategies.
• Excellent communication skills, with the ability to mentor and train technical teams.
• Strong foundation in firewall engineering and cloud security, with experience leading cloud security transformation initiatives.
• Ability to guide and upskill network-focused teams on cloud security best practices.
• Ability to serve as the primary subject matter expert while remaining hands-on with implementation and troubleshooting.
Preferred Qualifications
• Experience with Google Cloud Platform (GCP) security and firewall technologies.
• Experience with traditional firewall platforms, including Palo Alto Networks, Check Point, or other enterprise firewall solutions.
• Experience with Terraform or other Infrastructure as Code tools; Terraform is preferred.
• Experience working in large enterprise environments with established change management and security governance processes.
