Network Security & Cloud Engineer

Network Security & Cloud Engineer page is loaded## Network Security & Cloud Engineer remote type:
Remote locations:
Remote USA:
LC10530 - 2160 Superior Avenue, Cleveland, OHtime type:
Full time posted on:
Posted Yesterday job requisition :
JR02584

Cross Country Mortgage (CCM) is the nation's number one distributed retail mortgage lender with more than 7,000 employees operating over 700 branches and servicing loans across all 50 states, D.C. and Puerto Rico. Our company has been recognized ten times on the Inc. 5000 list of America's fastest-growing private businesses and has received many awards for our standout culture.
** A culture where you can grow!
** CCM has created an exceptional culture driving employee engagement, exceeding employee expectations, and directly impacting company success. At our core, our entrepreneurial spirit empowers every employee to be who they are to help us move forward together. You’ll get unwavering support from all departments and total transparency from the top down.

CCM offers eligible employees a competitive compensation plan and a robust benefits package, including medical, dental, vision, as well as a 401K. We also offer company-provided short-term disability, an employee assistance program, and a wellness program.
*
* Position Overview:

** The Network Security & Cloud Engineer is responsible for designing, implementing, and maintaining security controls across enterprise networks and multi‐cloud environments (AWS and Azure). This role oversees IAM architecture, cloud security services, hybrid connectivity, and network access control. It includes managing Cisco and Meraki infrastructure, administering SASE/SD‐WAN solutions, conducting vulnerability assessments, monitoring logs through SIEM platforms, and participating in incident response.

The Network Security & Cloud Engineer position also develops security standards, documentation, and runbooks while contributing to cloud security architecture reviews and compliance initiatives.
*
* Job Responsibilities:

*** Design, implement, and maintain security controls across enterprise network and multi-cloud (AWS, Azure) environments.
* Architect and enforce Identity and Access Management (IAM) policies in AWS and Azure following least-privilege and zero-trust principles.
* Implement and manage AWS security services (Guard Duty, Security Hub, Cloud Trail, Config, IAM, KMS, VPC security groups, NACLs).
* Implement and manage Azure security services (Defender for Cloud, Sentinel, Azure AD/Entra , NSGs, RBAC, Conditional Access).
* Secure hybrid connectivity between on-premises networks and cloud environments (VPN, SD-WAN, Direct Connect/Express Route).
* Administer and maintain Cisco ISE for network access control and policy enforcement.
* Secure and monitor Meraki networks across branch and corporate locations.
* Operate and harden Cisco Catalyst infrastructure with segmentation and secure configuration standards.
* Configure and manage Cato SASE / SD-WAN infrastructure for secure branch-to-cloud connectivity.
* Conduct vulnerability assessments across network and cloud assets; coordinate remediation.
Monitor network and cloud logs via SIEM platforms (Splunk, Sentinel, or equivalent).
* Participate in incident response related to network or cloud security events.
* Develop security standards, documentation, diagrams, and operational runbooks for both network and cloud environments.
* Contribute to cloud security architecture reviews and support compliance requirements (SOC, regulatory audits, etc.).
*
* Qualifications and Skills:

*** Bachelor’s degree in Information Technology, Computer Science, or related field; or equivalent experience.
* 3+ years of experience in enterprise network security and/or cloud security engineering roles.
* Hands-on experience securing production AWS and/or Azure environments.
* Experience with AWS security services (IAM, Guard Duty, Security Hub, Cloud Trail, Config, KMS, VPC security design)
* Experience with Azure security services (Defender for Cloud, Entra /Azure AD, RBAC, NSGs, Conditional Access, Sentinel), Cisco ISE (administration, policy design, troubleshooting), Cisco Catalyst secure switching and…