Sr Network Engineer- Cloud Security

Hertz is a leading global car rental company, and they are seeking a Senior Network Engineer specializing in Cloud Security. The role involves designing, building, and operating cloud-native network security controls to protect enterprise workloads across various cloud environments.

Responsibilities:

• Design and implement cloud-native network security architectures across AWS and OCI, including VPC/VCN segmentation, private connectivity, and identity-aware access patterns
• Engineer and operate next-generation firewall platforms (Palo Alto, Check Point, Fortinet, Cisco) and cloud firewalls (AWS Network Firewall, OCI Network Firewall, Security Groups, NACLs)
• Develop and maintain scalable firewall and network security policies, including segmentation, micro-segmentation, NAT, VPNs, and egress/ingress controls across hybrid environments
• Automate security guardrails and firewall operations using Terraform, CloudFormation, Ansible, Python, PowerShell, Bash, or API-driven workflows
• Integrate network security controls with cloud and hybrid infrastructure, including Transit Gateway, Direct Connect, OCI FastConnect, Cloud WAN, load balancers, DNS, and service-to-service communication patterns
• Support secure connectivity for distributed on-prem devices and mobile endpoints, including VPN clients, mobile access gateways, ZTNA/SASE integrations, and secure remote access for laptops, tablets, and smartphones
• Monitor and enhance network security posture using cloud-native logging, monitoring, and detection tools (CloudWatch, OCI Logging/Monitoring, Panorama, FortiManager, SIEM platforms)
• Participate in incident response for cloud and network security events, including triage, containment, and root cause analysis
• Collaborate with cloud, platform, and application teams to embed secure-by-default patterns into architecture and CI/CD workflows
• Contribute to resilience and disaster recovery strategies for network and firewall infrastructure

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field required
• Strong experience with cloud networking and security across AWS and OCI, including cloud-native monitoring, logging, observability, and security tools (e.g., CloudWatch, OCI Observability, Panorama, FortiManager, SIEM)
• Hands-on experience with next-generation firewalls (Palo Alto, Fortinet, Check Point, Cisco) and supporting distributed on-premises and mobile environments, including VPNs, ZTNA/SASE, and secure remote access solutions
• Deep knowledge of networking and security protocols (TCP/IP, DNS, DHCP, IPSec, SSL/TLS, routing), Zero Trust architectures, segmentation, and least-privilege access models
• Proven success supporting large-scale, regulated, hybrid-cloud, and globally distributed environments, with familiarity with compliance frameworks including PCI DSS, SOX, ISO 27001, NIST 800-53/CSF, and HIPAA
• Strong analytical, troubleshooting, critical-thinking, and decision-making skills, with the ability to see the big picture, solve complex problems, and work effectively in ambiguous situations
• Excellent communication, collaboration, organization, time management, and prioritization skills, with the ability to partner effectively with internal and external stakeholders across multiple functions and locations
• Results-driven, adaptable, and self-motivated professional who can work independently with minimal supervision in a goal-oriented environment
• Relevant certifications such as PCNSE, Fortinet NSE 4/5/7, CCNP/CCIE Security, AWS Security Specialty, or OCI Security Professional
• Experience with DevSecOps, CI/CD-driven security automation, platform engineering, and infrastructure-as-code tools such as Terraform