Network Cloud Security Specialist

• Design, implement, and optimize secure network architectures within the AWS ecosystem, applying segmentation, isolation, and least-privilege principles.
• Configure, administer, and enhance Palo Alto Networks / VM-Series firewalls and Zscaler ZIA/ZPA platforms.
• Lead the SASE/Zero Trust strategy.
• Develop and maintain automated network and security infrastructure using Terraform and Security as Code.
• Detect, analyze, and mitigate network security threats and incidents in real time.
• Ensure compliance with internal guidelines and the PCI-DSS, ISO 27001, and CIS Benchmarks frameworks.
• Mentor engineers and analysts and serve as the Security by Design subject-matter expert for technology teams.

• Strong technical experience in Network Security and Cloud Security within complex, scalable environments.
• Advanced command of the AWS-native networking and security ecosystem, including VPC, Security Groups, NACLs, Transit Gateway, Route 53, AWS WAF, Shield, GuardDuty, and CloudTrail.
• Extensive experience administering Palo Alto Networks next-generation firewalls (VM-Series, Panorama).
• Robust technical experience with Zscaler SASE/Zero Trust solutions (Zscaler Internet Access—ZIA—and Zscaler Private Access—ZPA).
• Deep knowledge of networking fundamentals, including dynamic routing protocols (BGP, OSPF), VPN topologies (IPsec, SSL), the TCP/IP and OSI models, and advanced packet analysis.
• Hands-on experience creating and maintaining infrastructure as code (IaC) using Terraform.
• Preferred qualifications: practical knowledge of security in Microsoft Azure or Google Cloud Platform (GCP), experience with CNAPP/CSPM, and active technical certifications such as AWS Certified Advanced Networking, AWS Certified Security—Specialty, PCNSE, ZCCS, CISSP, CCSP, or CEH.