Network Engineer

Required Experience : - 5+ years in network engineering and security roles with F5 load balancer experience- 4+ years specific experience with cloud networking and security (GCP preferred)- 3+ years experience with infrastructure migrations or datacenter-to-cloud transitions- 3+ years hands-on experience with site-to-site VPNs and hybrid connectivity- Experience with Splunk and enterprise security systems in large environments- Background in financial services or highly regulated industries preferred- Certifications in networking (CCNA/CCNP) or cloud security preferred but not Architecture & Design : - Cloud Network Design : Design secure, scalable network architecture in GCP including VPCs, subnets, and network segmentation- Hybrid Connectivity : Implement and manage secure connectivity between on-premises infrastructure and GCP environments- Network Segmentation : Design and implement network segmentation strategies for different application tiers and environments- Load Balancing : Configure and optimize load balancers for application availability and performance- DNS & Traffic Management : Implement DNS strategies and traffic routing for seamless application Implementation & Compliance : - Security Framework : Implement comprehensive security controls aligned with FinTech regulatory requirements- Identity & Access Management : Configure IAM policies, service accounts, and role-based access controls in GCP- Firewall Management : Design and implement firewall rules, security groups, and network access controls- Encryption : Ensure data encryption in transit and at rest across all network communications- Compliance Monitoring : Implement security monitoring and compliance validation Connectivity & Integration : - VPN Configuration : Configure and manage site-to-site VPN connections between on-premises and cloud environments- Network Migration : Plan and execute network configuration migration for applications moving from Hyper-V to GCP- External Integrations : Secure network connectivity for external API integrations and third-party services- Multi-Environment Networking : Implement consistent network configurations across Dev/QA/Staging/Production environments- Network Troubleshooting : Diagnose and resolve network connectivity and performance Monitoring & Incident Response : - Security Monitoring : Implement continuous security monitoring and threat detection systems- Vulnerability Management : Conduct regular security assessments and vulnerability scanning- Incident Response : Develop and implement security incident response procedures- Security Logging : Configure comprehensive security logging and SIEM integration- Compliance Reporting : Generate security compliance reports and audit Technical Skills : Network Technologies : - Cloud Networking : 3+ years hands-on experience with GCP networking services (VPC, Cloud Load Balancing, Cloud NAT)- Network Protocols : Deep understanding of TCP/IP, routing protocols, VLANs, and network fundamentals- VPN Technologies : Experience with site-to-site VPNs, IPSec, and secure tunnel configurations- Load Balancing : Proficiency with cloud load balancers and traffic distribution strategies- DNS Management : Experience with DNS configuration, management, and traffic Technologies : - Cloud Security : Strong experience with GCP security services (IAM, Security Command Center, Cloud Armor)- Firewall Management : Expert-level experience with firewall configuration and network security controls- Security Frameworks : Knowledge of security frameworks and compliance standards (SOC 2, PCI DSS, ISO 27001)- Vulnerability Assessment : Experience with security scanning tools (Qualys, Nessus, or similar)- SIEM Integration : Understanding of security information and event management Security Requirements : - Regulatory Compliance : Understanding of financial services regulatory requirements and security standards- Data Protection : Knowledge of data privacy regulations and encryption requirements- Risk Assessment : Experience conducting security risk assessments and threat modeling- Audit Support : Experience supporting security audits and compliance assessments- Incident Management : Knowledge of security incident response and forensic Tools & Platforms : - Monitoring Tools : Experience with network monitoring tools (Datadog, New Relic, Google Cloud Monitoring)- Security Tools : Proficiency with security scanning and monitoring tools- Automation : Scripting skills in Python, Bash, or PowerShell for network automation- Infrastructure as Code : Understanding of Terraform for network and security resource provisioning- Documentation : Proficiency with network diagramming tools (Visio, Lucidchart) (ref:hirist.tech)