Cloud Network Security Engineer
United States of America
Full Time
2 hours ago
No H1B
Key skills
Google Cloud Platform (GCP) networkingShared VPCsCloud RouterCloud NATInterconnectPeeringGCP Cloud FirewallsNext-Generation Firewalls (NGFW)Hierarchical FirewallsVPC Service Controls (VPC SC)Cloud Intrusion Detection Systems (Cloud IDS)Cloud IPSCloud ArmorWeb Application Firewall (WAF)DDoS protectionSecure web gatewaysProxy solutionsTerraformPython scriptingGo scriptingBash scriptingGit workflowsCI/CD pipelinesGoogle Cloud Professional Security Engineer certificationGoogle Cloud Professional Network Engineer certificationCISSP certificationNetwork EngineeringInformation SecurityThreat modelingBusiness continuity and disaster recoveryNetwork forensicsSecurity and risk frameworksEndpoint securityInformation systems auditingVendor risk assessmentCyber risk assessmentNetwork intrusion detection/preventionIdentity and access managementIT lifecycle managementPythonGoBashExpressAWSAzureGCPGoogle CloudGitCI/CDProject ManagementCollaborationNetwork SecurityZero TrustWAFFirewall
About this role
Federal Express Corporation is a leading logistics and courier company, and they are seeking a Cloud Network Security Engineer. The role involves designing and maintaining secure cloud network architectures, managing network security operations, and ensuring compliance with internal policies and regulations.
Responsibilities:
- Architecture & Design: Design, implement, and maintain highly secure cloud network architectures within Google Cloud Platform (GCP), adhering to Zero Trust principles and organizational security standards
- Network Security Operations: Deploy, configure, and manage core GCP network security services, including Cloud Next-Generation Firewalls (NGFW), VPC Service Controls (VPC SC), Cloud Intrusion Detection Systems (Cloud IDS), and Cloud Armor
- Infrastructure as Code (IaC): Lead the automation of network security infrastructure deployment using IaC tools (primarily Terraform). Build and maintain reusable modules for secure baseline configurations
- Monitoring & Threat Detection: Implement and tune logging and monitoring solutions for network traffic. Respond to alerts generated by Cloud Logging, SIEM platforms, and centralized firewall logging
- Cross-Functional Collaboration: Partner closely with Cloud Architects, Platform engineering DevOps, and application teams to embed security requirements into cloud deployments without hindering developer velocity
- Governance & Compliance: Ensure all cloud network configurations comply with internal policies, industry regulations, and best practices
Requirements:
- 5+ years of experience in Network Engineering or Information Security, with at least 2+ years of dedicated, hands-on experience securing Google Cloud Platform (GCP) environments
- Deep understanding of GCP networking constructs, including Shared VPCs, Cloud Router, Cloud NAT, Interconnect, and Peering
- Proven technical expertise in configuring and managing: GCP Cloud Firewalls (Standard and NGFW/Hierarchical), VPC Service Controls (VPC SC) for data exfiltration mitigation, Cloud IDS / IPS solutions, Cloud Armor (WAF and DDoS protection), Secure web gateways and proxy solutions
- Advanced proficiency in Terraform. Experience writing, testing, and managing complex state files and custom provider modules for cloud infrastructure
- Strong scripting skills in Python, Go, or Bash for automating routine security tasks, API integrations, and custom remediation scripts
- Hands-on experience with Git workflows and embedding IaC deployments into CI/CD pipelines
- Bachelor's degree in computer science, information systems and/or equivalent formal training or work experience
- Six (6) years' experience in a minimum of four (4) of the following areas: Business continuity and disaster recovery, network forensics, security and risk frameworks, endpoint security, information systems auditing, vendor risk assessment, cyber risk assessment, network intrusion detection/prevention, identity and access management, IT lifecycle management
- Strong technical, consulting, and project management skills
- Ability to communicate technical subject matter effectively to multiple organizational layers
- Google Cloud Professional Security Engineer, Google Cloud Professional Network Engineer, CISSP, or equivalent industry certifications
- Familiarity with cross-cloud connectivity and security principles across Azure or AWS is a strong plus
- Experience conducting threat modeling for complex distributed cloud architectures