Cloud Security Engineer

Confidential Company

About the Role:

Seeking a Cloud Security Engineer to design, implement, and manage secure cloud and network architectures across Azure, AWS, and hybrid environments. The role involves building Zero Trust and Well-Architected cloud platforms, managing firewalls, WAFs, VPNs, and cloud-native security services, and ensuring compliance, automation, and threat protection across enterprise systems.

Key Responsibilities:

• Design, implement & maintain Azure/AWS cloud security and network architectures.
• Manage and optimize firewalls (NGFW), WAF, VPNs, Load Balancers, and DDoS protection.
• Implement secure connectivity (VNet/VPC Peering, Private Endpoints, ExpressRoute).
• Operate and enhance Azure Firewall, App Gateway, NSG, Front Door, DDoS Protection.
• Deploy and manage SASE / ZTNA solutions for remote access security.
• Automate security deployments using Terraform, Bicep, or ARM templates (IaC).
• Use CSPM / CNAPP tools (Defender for Cloud, Prisma Cloud, Wiz) for governance & compliance.
• Collaborate with architecture and security teams to review and secure cloud network designs.
• Support incident response, patching, and vulnerability management.

Requirements:

• Degree/Diploma in Computer Science or IT.
• Hands-on experience in Azure networking & security (AWS/GCP a plus).
• Strong understanding of TCP/IP, VPN, DNS, load balancing, segmentation.
• Expertise in firewall/WAF platforms (Fortinet, Palo Alto, F5, etc.).
• Experience with EDR/XDR, SIEM/SOAR tools.
• Familiar with Terraform/Bicep and Zero Trust / SASE frameworks.
• Excellent troubleshooting and cross-team collaboration skills.