Network Security Lead - Cloud Infrastructure

Role overview

Responsibilities

• Design cloud and on-premises network architectures, addressing, subnetting, routing, VPNs, peering, and dedicated interconnects.
• Deploy and manage network security environments, including firewalls, NVAs, security groups, ACLs, and gateways.
• Operate 24/7 infrastructure with redundancy, failover, load balancing, backup, restore, and disaster recovery.
• Manage changes, patches, vulnerabilities, monitoring, incidents, and audit remediation across network and security systems.
• Prepare operational reports and dashboards; lead service and incident meetings and handle critical escalations.
• Coordinate with cloud, security, application, and operations teams; maintain technical documentation and mentor engineers.
• Participate in on-call rotation and travel to data center or client sites as needed.

Experience and qualifications

• 10–12 years in cloud infrastructure, network operations, and cybersecurity engineering with hands-on infrastructure ownership.
• Depth in at least two of Azure, GCP, and OCI is required; all three are strongly preferred.
• Required credentials include CCNP Enterprise/Security or equivalent, an applicable Azure certification, an applicable Google Cloud certification, an OCI network security or architect certification, CISSP or working toward it, and a firewall/NGFW vendor certification.
• CCIE, CISM, and CEH are preferred; credentials must be current and equivalent recognized credentials are subject to approval.
• Experience with 24/7 availability, redundancy and DR, multi-disciplinary operations, reporting, operational meetings, escalations, change/CAB processes, enterprise network equipment, security monitoring, hardening, and audit remediation.
• Strong troubleshooting, incident response, communication, and coordination skills; able to participate in on-call and travel as needed.

Technical environment

• Cloud platforms: Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure.
• Networking and security: routing, switching, BGP, VPNs, peering, ExpressRoute, Interconnect, FastConnect, firewalls, NVAs, ACLs, and gateways.
• Monitoring and standards include Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs, CIS, and NIST.

Workplace and schedule

• The role supports round-the-clock operations and requires participation in an on-call rotation.
• Travel to data center or client sites is required as needed.
• Source location metadata classifies the workplace as onsite.