Cloud Security Network Engineer

Daily Duties / Responsibilities

• Design, deploy, and maintain highly available, scalable, and secure cloud infrastructure.
• Build and support enterprise cloud environments across AWS and Microsoft Azure.
• Ensure cloud infrastructure follows security best practices and high availability standards.
• Deploy, configure, and manage Palo Alto VM-Series Firewalls in AWS and Azure.
• Implement and maintain firewall security policies.
• Perform firewall optimization, upgrades, troubleshooting, and performance tuning.
• Manage Panorama configurations, templates, device groups, and centralized policy management.
• Deploy, configure, and manage F5 BIG-IP LTM and F5 ASM in AWS and Azure cloud environments.
• Configure load balancing, application security, and traffic management.
• Maintain high availability and optimize application delivery services.
• Design and implement Zero Trust cloud security architecture.
• Build secure cloud infrastructure aligned with enterprise cybersecurity standards.
• Implement monitoring, logging, auditing, and compliance controls.
• Ensure compliance with regulatory and security frameworks, including: ARC-AMP (formerly MARS-E), NIST HIPAA, PII, SOX, PCI-DSS, CMMC, CUI.
• Analyze and resolve configuration issues across: Development, Test, Production environments.
• Support production environments and ensure operational stability.
• Support cloud security initiatives for State and Local Government customers.
• Implement government security policies and compliance requirements.

Required Skills

• 10+ years of experience in Network Security and Network Engineering.
• Minimum 5 years of hands-on experience designing, deploying, scaling, upgrading, troubleshooting, and optimizing Palo Alto VM-Series Firewalls in both AWS and Azure cloud environments.
• Strong experience with: Palo Alto Panorama, Security policy design, Threat Prevention tuning, Log analysis.
• Demonstrated expertise designing and implementing Zero Trust security architecture using Palo Alto technologies.
• Minimum 5 years of experience deploying, configuring, and maintaining F5 BIG-IP LTM.

Preferred Skills

• Palo Alto Firewalls
• F5 BIG-IP LTM
• F5 ASM (Application Security Manager)
• F5 iRules
• Infoblox DDI
• Forescout OPSWAT
• MetaDefender / ICAP
• BIG-IP F5 XC
• Prisma Cloud
• Cisco Umbrella

Preferred Certifications

• PCNSA (Palo Alto Certified Network Security Administrator)
• PCNSE (Palo Alto Certified Network Security Engineer)
• AWS Certified Solutions Architect

Required Education

• Bachelor's degree or equivalent.
• OR 10+ years of equivalent experience as a Palo Alto Cloud Engineer.
• Must hold at least one relevant certification in: Palo Alto Networks, AWS, Microsoft Azure.

Skills

• Excellent written and verbal communication skills.
• Self-motivated and able to work independently.
• Strong experience with: Panorama Templates, Device Groups, GlobalProtect in Cloud, High Availability (HA) VPN configuration, Traffic routing on Palo Alto VM-Series.
• Expertise in cloud security architecture, operations, and automation.
• Strong documentation skills for: Security tools, Deployment configurations, Architecture documentation, Incident reports, Operational procedures.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Experience supporting enterprise and government cloud security environments.