Cloud Network & Security Engineer

Cloud Network & Security Engineer

Department : IT

Reports To : Sr. Director Technology Operations

Position Summary :

The Cloud Network & Security Engineer is responsible for designing, implementing, and supporting secure, scalable, and resilient network infrastructure across both on-premises and cloud environments. This role owns the enterprise firewall, switching, and wireless infrastructure while also leading cloud network security efforts including Azure NSGs, conditional access policies, and VPN connectivity. The engineer partners with infrastructure, endpoint, and security teams to ensure end-to-end protection and access control, acting as a Tier 2.5 escalation point for network and cloud security issues.

Essential Duties and Responsibilities :

• Manage and maintain Palo Alto firewalls (on-prem and cloud), Cisco switches, and Meraki wireless infrastructure.
• Design, implement, and administer Azure network services including NSGs, route tables, VPNs, and firewall configurations.
• Support implementation and optimization of conditional access, identity-aware access controls, and hybrid connectivity.
• Collaborate with security and infrastructure teams to align network configurations with compliance and governance standards.
• Serve as a Tier 2.5 escalation point for network and infrastructure-related security incidents.
• Develop and maintain detailed documentation including network diagrams, runbooks, and change management records.
• Assist with onboarding new systems into network monitoring platforms; tune alerts and thresholds as necessary.
• Participate in cross-functional projects related to Zero Trust networking, segmentation, and infrastructure security design.
• Support DLP, compliance scanning, and external system connectivity as needed.
• Review, maintain, and update technical documentation related to cloud infrastructure, network configurations, and security controls to ensure completeness, accuracy, and alignment with current architecture and policies
• Train and mentor Tier 1-2 team members on standard network procedures and issue response .
• Support network-as-code automation efforts using terraform or similar IaC tools .
• Supports incident response coordination with security teams .
• Support the integration of network logs into SIEM platforms and assist with vulnerability scanning and tuning alert thresholds .
• Support efforts to implement Microsoft Entra Global Secure access

What you should show up ready to teach anyone on your first day :

Within your first month, you'll :

Within your first year, you'll :

Supervisory Responsibilities : None

Education and Experience :

Certifications preferred (or equivalent experience) :