Cloud Network Security Engineer

Request ID: 100914-1
Title: Cloud Network Security Engineer
Locations: Phoenix, AZ
Duration: 06+ Months with Possible Extension.
Pay Range: $45-$49/Hour on W2/C2C (All inclusive)

We are seeking a highly skilled Cloud Network Security Engineer to design, implement, and secure enterprise cloud networking environments across public and private cloud platforms. The ideal candidate will have expertise in cloud networking, network security, Infrastructure-as-Code (IaC), hybrid connectivity, and cloud-native security technologies. This role requires close collaboration with Cloud Engineering, Network Engineering, Security Architecture, and Security Operations teams to build scalable, resilient, and secure cloud infrastructure.

Key Responsibilities

• Design, develop, and implement secure cloud network architectures across AWS, Azure, GCP, or Oracle Cloud.
• Engineer and automate network security controls including cloud firewalls, on-premises firewalls, security groups, network ACLs, and cloud-native security services.
• Develop and maintain Infrastructure-as-Code (IaC) using Terraform, CloudFormation, or similar automation tools.
• Implement secure hybrid connectivity between on-premises and cloud environments.
• Configure and support VPN, AWS Direct Connect, Azure ExpressRoute, Transit Gateway, VPC/VNet Peering, Private Link, and service mesh technologies.
• Perform proof-of-concept (POC) evaluations for emerging cloud networking and security technologies.
• Collaborate with Security Operations and Incident Response teams to improve network visibility, monitoring, logging, and threat detection.
• Participate in security architecture reviews to ensure cloud environments comply with enterprise security standards and best practices.
• Design and implement Zero Trust networking strategies and cloud-native security controls.
• Secure enterprise SaaS integrations using identity-aware access, API security, and conditional access policies.
• Integrate SaaS platforms with enterprise Identity Providers (Azure AD/Entra ID, Okta, Ping Identity) using SAML, OAuth, and OpenID Connect (OIDC).
• Automate operational tasks and improve cloud security posture through scripting and security orchestration.
• Utilize AI-powered tools to enhance engineering productivity and automate cloud security operations.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field.
• 6–9 years of experience in Cloud Network Security, Cloud Security, or Infrastructure Security.
• Hands-on experience designing and securing enterprise cloud environments across AWS, Azure, GCP, or Oracle Cloud.
• Strong understanding of cloud-native networking concepts including VPCs, VNets, routing, segmentation, load balancing, private connectivity, encryption, and network policy enforcement.
• Experience with Infrastructure-as-Code (Terraform, CloudFormation, or similar).
• Experience implementing hybrid cloud networking and secure connectivity solutions.
• Strong knowledge of enterprise network security technologies and Zero Trust principles.
• Experience with cloud security monitoring, logging, SIEM integration, and threat detection.
• Excellent analytical, troubleshooting, and communication skills.

Required Technical Skills

• Cloud Network Security
• AWS, Client Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI)
• Terraform
• AWS CloudFormation
• Infrastructure as Code (IaC)
• Cloud Firewalls
• Security Groups
• Network ACLs
• VPN
• AWS Direct Connect
• Azure ExpressRoute
• AWS Transit Gateway
• VPC & VNet Peering
• Private Link
• Service Mesh
• Zero Trust Network Access (ZTNA)
• Secure Access Service Edge (SASE)
• Secure Service Edge (SSE)
• Cloud Access Security Broker (CASB)
• IAM
• Azure AD / Entra ID
• Okta
• Ping Identity
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• API Security
• SIEM Integration
• Cloud Logging & Monitoring
• IDS/IPS
• Web Application Firewall (WAF)
• Secure Web Gateway (SWG)
• DNS Security
• Network Segmentation
• Threat Detection
• Security Automation
• AI-Assisted Security Engineering

Preferred Qualifications

• Cloud Security certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate (AZ-500), Google Professional Cloud Security Engineer, or equivalent.
• Experience with Kubernetes networking and service mesh technologies (Istio, Linkerd).
• Familiarity with DevSecOps, CI/CD security, and container security.
• Experience with scripting languages such as Python, Bash, or PowerShell.

Experience Required

6–9 years of experience in Cloud Network Security, Infrastructure Security, or Cloud Security Engineering with expertise in secure cloud connectivity, firewall automation, hybrid networking, Infrastructure-as-Code, and enterprise cloud security.