Senior Cloud Network Security Engineer

About this opportunity

This senior role is focused on designing, deploying, and automating traditional and cloud network infrastructure to ensure security and compliance. We are seeking a skilled professional to lead our team in securely implementing network solutions that meet regulatory requirements.

The position involves responsibility for the secure design, installation, and configuration of critical infrastructure at new and existing sites, including switches, firewalls, wireless access points, and ISP circuits.

• Network Design & Deployment: Securely design, deploy, and manage traditional and cloud network infrastructure to meet compliance and regulatory requirements.
• Compliance Automation & Audit: Implement and automate regular network infrastructure audits and compliance checks using Ansible, Python, Bash, and IAC tools (Terraform, Crossplane).
• Routine Upgrades & Changes: Manage OS upgrades, routing changes, ACL/firewall updates, and ensure change control processes align with compliance requirements.
• Firewall & Security Operations: Oversee deployment and full lifecycle management of NGFW solutions (especially Palo Alto), including rule reviews, vulnerability mitigation, and audit preparation.
• Cloud Network Security: Secure, segment, and manage network resources across AWS (preferred), Azure, and GCP; integrate security best practices and compliance controls.
• Incident Management & Forensics: Respond to security/network incidents, perform traffic/port scans, document findings, and lead post-mortems to reduce risks and maintain audit trails.
• Collaboration & Cross-Functional Enablement: Work with vendors, workplace, compliance, and development teams to deliver reliable, compliant infrastructure and integrate controls into CI/CD pipelines.
• Monitoring & SIEM Integration: Implement advanced monitoring and SIEM tooling to achieve real-time, auditable visibility into network and cloud health; proactively detect issues and support compliance documentation.
• Resilience: Contribute to infrastructure strategy with advancing automation, proactive defense, disaster recovery, and regulatory alignment.
• On-Call & Escalation: Participate in on-call rotation for urgent, compliance-relevant incidents and act as a technical escalation point for critical issues.

Required Skills and Qualifications

• 4+ years in network and/or SRE roles with hands-on firewall expertise (Palo Alto preferred); experience with deployment, upgrades, and compliance evidence collection.
• Practical cloud networking experience (AWS preferred); strong grounding in IP networking, routing, switching, VPN, DNS, load balancing, and relevant security protocols.
• Demonstrated proficiency with automation (Ansible, Python, Bash) and IAC tools (Terraform, Crossplane) in regulated environments.
• Experience integrating security policies and controls into CI/CD pipelines and building auditability into network/cloud automations.
• Familiarity with microservices environments and the unique network/compliance needs they introduce.
• Advanced PKI, certificate management, digital signature, and secure communication skills; capability to lead incident forensics and produce audit-ready documentation.
• Competence using SIEM, DLP, and privileged access management solutions in accordance with regulatory frameworks (PCI, SOX, ISO, etc.).
• Self-motivation, a troubleshooting mindset, and an independent bias for resolving complex network security/compliance issues.

Benefits

We offer competitive salaries, extensive medical insurance, flexible working hours, tailored vacation & leave policies, a reward system, learning and upskilling opportunities, good food, games, and a cool office environment.