Engineer - Network Security

Technical owner of the organization's cloud and network security posture. Primarily hands-on – engineering, configuring, and administering cloud-native and on-premises network security controls without service-provider reliance.

Administration of Azure and GCP cloud networking, and enterprise network security platforms including Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure.Hands-on experience across NDR, DLP, PAM, WAF.

• Solely implement, administer, and manage (out-of-the-box, no service-provider involvement): Azure and GCP cloud networking, and enterprise network/security platforms including Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure.
• Implement and monitor security best practices across Azure/GCP cloud networking and enterprise firewall, WAF, and NAC platforms.
• Manage, operate, and conduct configuration reviews of NDR, DLP, PAM, WAF
• Provide continuous cybersecurity advisory and risk assessment strategy support; assist with security product evaluation and service provider selection.
• Travel to datacenter and client locations as required; provide on-call incident support outside business hours as needed.
• 8–10 years in cloud/cybersecurity engineering with hands-on ownership of Azure/GCP cloud networking and enterprise network security platforms.
• Proven administration of Fortinet, F5, Palo Alto, Cisco ISE, WLC, and switching infrastructure without vendor support.
• Willing and able to travel to datacenter/client sites and provide on-call support as needed.

Required Certifications

• Microsoft Oracle /Google Azure Certification
• NDR platform certification (e.g., Vectra, Darktrace, or ExtraHop certified administrator).
• F5 Certified BIG-IP Administrator (WAF) – Mandatory.
• Firewall administration certification (Fortinet/PaloAlto)
• Cisco ISE and Wireless administration