Cloud Network Security Engineer - Consultant

title: cloud network security engineer - consultant

location: columbia, sc

on-site/remote/hybrid: onsite for first 90 days, later hybrid (3 days onsite / 2 days remote).

duration: 12 months

interview process: 1 round virtual

work location: the resource will be required to be onsite monday through friday for the first 90 days. After 90 days, the position will change to hybrid with 2‑3 days onsite/week.

candidate location: candidate must be a current sc resident. No relocation allowed.

• the cloud network security engineer will collaborate with product owners, applications owners, network and security teams to design and deliver optimal solutions for large‑scale app and infrastructure cloud solutions.
• candidates should possess proficiency in both public and hybrid cloud models. Exceptional consulting skills and the ability to clearly derive desired states from customer requests are essential.
• the role also requires the ability to work with delivery teams.
• importantly, this role is hands‑on in delivery, requiring active involvement in the implementation and execution of security solutions.
• this is not a developer role.

• design and implement secure hybrid and multi‑cloud network architectures (aws, azure)
• architect vpc/vnet segmentation, routing, and connectivity (hub‑and‑spoke, transit vpc/vnet)
• integrate on‑prem networks with cloud environments using vpn, direct connect, or express route
• define network standards, reference architectures, and security guardrails
• design and maintain secure ingress/egress controls and east‑west traffic inspection
• implement network segmentation, microsegmentation, and zero‑trust principles

• 5‑10 years' experience in information security and engineering
• 5+ years of experience designing and maintaining infrastructure in aws/azure
• cloud security design, operations, and automation experience
• documentation of security tools, deployment configuration, incident reports, etc.
• bachelor's degree or equivalent experience
• must hold aws or azure certification

• 5+ years of experience deploying, configuring and maintaining cloud vm series palo alto firewalls in aws and azure palo alto firewalls f5 load balancing/firewall infoblox
• foresight prisma cloud
• aws certified cloud solutions architect
• pcnsa or pcnse