CyberSecurity Specialist – CNI

Our client, a IT Services and Consulting company, is looking for a Cloud Network Security Engineer for their Phoenix, AZ/Hybrid location.
 
Responsibilities:

• Network Security Cloud Engineering role is focused on hands-on cloud network security engineering, including secure cloud connectivity, firewall and policy automation, cloud-native network controls, and operational support for enterprise-scale hybrid environments.
• The role directly supports enterprise network security capabilities that protect cloud infrastructure and applications.
• The successful candidate will work closely with Information Security, Cloud Engineering, Enterprise Architecture, Network Engineering, Cloud Operations, and application development teams to design and implement cloud network security solutions. This position requires a highly motivated engineer with strong analytical and problem-solving skills, the ability to manage multiple initiatives simultaneously, and a passion for automation, Infrastructure-as-Code, and cloud-native networking technologies
• Design, develop, and implement cloud network security capabilities across public and private cloud platforms.
• Engineer and automate network security controls including on-premises firewalls, cloud firewalls, security groups, network ACLs, and cloud-native security services.
• Build and maintain Infrastructure-as-Code (Terraform, CloudFormation, or similar) to deploy secure cloud networking environments.
• Collaborate with Cloud Engineering, Network Engineering, and Security Architecture teams to implement secure hybrid connectivity between on-premises and cloud environments.
• Support secure connectivity solutions including VPN, Direct Connect, ExpressRoute, Transit Gateway, VPC/VNet peering, Private Link, and service mesh technologies.
• Conduct proof-of-concept evaluations of emerging cloud networking and security technologies.
• Partner with Security Operations and Incident Response teams to improve network visibility, logging, monitoring, and threat detection.
• Participate in architecture reviews to ensure cloud applications and infrastructure comply with enterprise security standards.
• Identify opportunities to improve operational efficiency through automation and security orchestration.

• What are the top 3 skills required for this role:
• Cloud Network Security Engineering
• Infrastructure-as-Code (IaC) & Automation
• Enterprise Network & SaaS Security
• Required Skills & Experience
• 5+ years of experience in Network Security, Cloud Security, or Infrastructure Security engineering.
• Experience designing and securing networking in AWS, Azure, Google, or Oracle Cloud Platform.
• Strong understanding of core cloud-native networking and security concepts, including VPCs and VNets, routing, segmentation, load balancing, private connectivity, identity-aware access, encryption, and network policy enforcement.
• Experience leveraging AI tools to enhance productivity, automate engineering tasks, and accelerate the delivery of secure cloud networking solutions.
• Experience with Infrastructure-as-Code tools such as Terraform or CloudFormation.
• Familiarity with security monitoring, SIEM integration, logging, and network telemetry.
• Familiarity with enterprise network security technologies such as next-generation firewalls, web application firewalls, secure web gateways, DNS security, IDS/IPS, network segmentation, and zero trust network access.
• Experience designing, securing, and supporting Software-as-a-Service (SaaS) environments and integrations, including secure connectivity, identity-aware access, API security, and SaaS security best practices.
• Familiarity with SaaS security solutions such as CASB, Secure Service Edge (SSE), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA) to protect enterprise users and cloud-based applications.
• Experience integrating SaaS platforms with enterprise identity providers (Azure AD/Entra ID, Okta, Ping Identity, or similar) using SAML, OAuth, and OpenID Connect (OIDC).
• Experience securing access to enterprise SaaS applications through conditional access policies, network segmentation, and cloud-native security controls.
• Experience supporting large-scale enterprise cloud migrations.
• Education & Certifications
• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline, or equivalent experience.
• Preferred Certifications Include:
• AWS Certified Security – Specialty
• AWS Advanced Networking – Specialty
• Azure Network Engineer Associate
• Azure Security Engineer Associate
• Google Professional Cloud Network Engineer
• Google Professional Cloud Security Engineer
• CCNP Security or equivalent
• Years of Experience: 10.00 Years of Experience

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities