CyberSecurity Specialist

Job Title: CyberSecurity Specialist - Cloud Network Infrastructure (CNI)

Location: Hybrid Phoenix, AZ

Tax Term (W2, C2C): W2

Job Type (Permanent/Contract): Contract

Duration: Long Term

Description:

We are seeking an experienced CyberSecurity Specialist - Cloud Network Infrastructure (CNI) with 10+ years of experience in Cloud Network Security Engineering. The ideal candidate will have strong expertise in designing, implementing, and securing enterprise cloud networking environments across hybrid infrastructures. This role focuses on cloud-native network security, Infrastructure-as-Code (IaC), enterprise SaaS security, automation, and secure cloud connectivity while collaborating with Cloud Engineering, Information Security, Enterprise Architecture, and Network Engineering teams.

Role and Responsibilities:

• Design, develop, and implement cloud network security capabilities across public and private cloud platforms.
• Engineer and automate network security controls including on-premises firewalls, cloud firewalls, security groups, network ACLs, and cloud-native security services.
• Build and maintain Infrastructure-as-Code (Terraform, CloudFormation, or similar) to deploy secure cloud networking environments.
• Collaborate with Cloud Engineering, Network Engineering, and Security Architecture teams to implement secure hybrid connectivity between on-premises and cloud environments.
• Support secure connectivity solutions including VPN, Direct Connect, ExpressRoute, Transit Gateway, VPC/VNet peering, Private Link, and service mesh technologies.
• Conduct proof-of-concept evaluations of emerging cloud networking and security technologies.
• Partner with Security Operations and Incident Response teams to improve network visibility, logging, monitoring, and threat detection.
• Participate in architecture reviews to ensure cloud applications and infrastructure comply with enterprise security standards.
• Identify opportunities to improve operational efficiency through automation and security orchestration.

Required Skills:

• Cloud Network Security Engineering
• Infrastructure-as-Code (Terraform, CloudFormation)
• Enterprise Network Security
• SaaS Security
• AWS, Azure, Google Cloud Platform (GCP), Oracle Cloud Infrastructure (OCI)
• VPC, VNet, Routing, Network Segmentation
• Cloud Firewalls
• Security Groups
• Network ACLs
• VPN
• AWS Direct Connect
• Azure ExpressRoute
• AWS Transit Gateway
• VPC/VNet Peering
• Private Link
• Service Mesh
• Network Policy Enforcement
• Identity-Aware Access
• Encryption
• AI-assisted Engineering & Automation
• SIEM Integration
• Logging & Monitoring
• Network Telemetry
• Next-Generation Firewalls (NGFW)
• Web Application Firewall (WAF)
• Secure Web Gateway (SWG)
• DNS Security
• IDS/IPS
• Zero Trust Network Access (ZTNA)
• Secure Access Service Edge (SASE)
• Secure Service Edge (SSE)
• Cloud Access Security Broker (CASB)
• SaaS Security
• API Security
• Azure AD / Microsoft Entra ID
• Okta
• Ping Identity
• SAML
• OAuth
• OpenID Connect (OIDC)
• Conditional Access Policies
• Cloud Migrations
• Security Architecture
• Incident Response
• Network Security Automation

Qualifications:

• 10+ years of experience in Network Security, Cloud Security, or Infrastructure Security Engineering.
• Experience designing and securing networking in AWS, Azure, Google Cloud Platform, or Oracle Cloud.
• Strong understanding of cloud-native networking concepts including VPCs, VNets, routing, segmentation, load balancing, private connectivity, identity-aware access, encryption, and network policy enforcement.
• Hands-on experience with Infrastructure-as-Code tools such as Terraform or CloudFormation.
• Experience with enterprise network security technologies including NGFW, WAF, SWG, DNS Security, IDS/IPS, network segmentation, and Zero Trust.
• Experience designing and securing SaaS environments, integrations, and enterprise cloud migrations.
• Familiarity with SIEM integration, security monitoring, logging, and network telemetry.
• Excellent analytical, troubleshooting, and communication skills.
• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or a related technical discipline, or equivalent experience.

Preferred Certifications:

• AWS Certified Security Specialty
• AWS Advanced Networking Specialty
• Azure Network Engineer Associate
• Azure Security Engineer Associate
• Google Professional Cloud Network Engineer
• Google Professional Cloud Security Engineer
• CCNP Security or equivalent