Cloud Network Security Engineers

You should have a comprehensive understanding of BGP to configure and troubleshoot in large global environments. Additionally, you should possess a thorough understanding of routing concepts such as Inter-VR routing, policy-based routing, routing protocols, route filtering, path selection, and access-lists. Moreover, a deep understanding of switching concepts including VLANs, Layer 2, Mac-forwarding, vlan trunking, VRRP, and Gratuitous ARP is required. Familiarity with firewall/security concepts like L2-L7, NAT versions, failover scenarios, zonal concepts, IPSec, URL filtering, DNS, and security profiles is essential. Furthermore, you should have a good understanding of Load Balancing concepts in both Cloud LB and conventional LB and be able to differentiate their functionalities. Proficiency in Public Cloud platforms, especially GCP, with knowledge in Networking, Firewalling, IAM, and their relation to Cloud Native services is preferred. Experience with Infrastructure as Code (IAC) for provisioning resources and the ability to customize and optimize the codebase for streamlined deliveries is necessary. Proficiency in Linux administration to bridge technical gaps in Windows and troubleshoot network connectivity issues using available tools is crucial. Moreover, knowledge of APIs to expedite data collection and configuration for error elimination, as well as an understanding of DevOps and its impact on delivery and operation improvement, are important. Primary Skills: - Network Security - Switches - Router - Firewalls - Cloud Products: - Juniper: MX, SRX, QFX - Palo Alto: Physical and virtual firewalls, Panorama Tools: - Terraform - Algosec or similar tool for traffic flow governance Mandatory languages: - Python - HCL (HashiCorp Configuration Language),