Cloud Security Network Engineer

Daily Duties / Responsibilities

• Design, deploy, and maintain highly available, scalable, and secure cloud infrastructure.
• Build and support enterprise cloud environments across AWS and Microsoft Azure.
• Ensure cloud infrastructure follows security best practices and high availability standards.

• Deploy, configure, and manage Palo Alto VM-Series Firewalls in AWS and Azure.
• Implement and maintain firewall security policies.
• Perform firewall optimization, upgrades, troubleshooting, and performance tuning.
• Manage Panorama configurations, templates, device groups, and centralized policy management.

• Deploy, configure, and manage F5 BIG-IP LTM and F5 ASM in AWS and Azure cloud environments.
• Configure load balancing, application security, and traffic management.
• Maintain high availability and optimize application delivery services.

• Design and implement Zero Trust cloud security architecture.
• Build secure cloud infrastructure aligned with enterprise cybersecurity standards.
• Implement monitoring, logging, auditing, and compliance controls.
• Ensure compliance with regulatory and security frameworks, including:
  • ARC-AMP (formerly MARS-E)
  • NIST
  • HIPAA
  • PII
  • SOX
  • PCI-DSS
  • CMMC
  • CUI

• Analyze and resolve configuration issues across:
  • Development
  • Test
  • Production environments
• Troubleshoot firewall, networking, cloud infrastructure, and application connectivity issues.
• Support production environments and ensure operational stability.

• Support cloud security initiatives for State and Local Government customers.
• Implement government security policies and compliance requirements.

• 10+ years of experience in Network Security and Network Engineering.
• Minimum 5 years of hands‑on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing Palo Alto VM‑Series Firewalls in both AWS and Azure cloud environments.
• Strong experience with:
  • Palo Alto Panorama
  • Security policy design
  • Threat Prevention tuning
  • Log analysis
• Demonstrated expertise designing and implementing Zero Trust security architecture using Palo Alto technologies.
• Minimum 5 years of experience deploying, configuring, and maintaining F5 BIG‑IP LTM.

• Palo Alto Firewalls
• F5 BIG-IP LTM
• F5 ASM (Application Security Manager)
• F5 iRules
• Infoblox DDI
• Forescout
• OPSWAT Meta Defender / ICAP
• BIG-IP F5 XC
• Prisma Cloud
• Cisco Umbrella

• PCNSA (Palo Alto Certified Network Security Administrator)
• PCNSE (Palo Alto Certified Network Security Engineer)
• Microsoft SC-100 – Cybersecurity Architect
• AWS Certified Solutions Architect

• Bachelor's degree or equivalent.
• OR 10+ years of equivalent experience as a Palo Alto Cloud Engineer.
• Must hold at least one relevant certification in:
  • Palo Alto Networks
  • AWS
  • Microsoft Azure

• Excellent written and verbal communication skills.
• Self‑motivated and able to work independently.
• Strong experience with:
  • Panorama Templates
  • Device Groups
  • Global Protect in Cloud
  • High Availability (HA)
  • VPN configuration
  • Traffic routing on Palo Alto VM-Series
• Experience designing, deploying, and maintaining cloud infrastructure in AWS and Azure.
• Expertise in cloud security architecture, operations, and automation.
• Strong documentation skills for:
  • Security tools
  • Deployment configurations
  • Architecture documentation
  • Incident reports
  • Operational procedures
• Excellent analytical, troubleshooting, and problem‑solving skills.
• Experience supporting enterprise and government cloud security environments.