Senior Network & Cloud Security Engineer

Role Overview :

The Senior Network & Cloud Security Engineer will serve as a key technical leader responsible for designing, implementing, validating, and improving security controls across enterprise network, cloud, wireless, and infrastructure environments.

This is a highly hands-on engineering role responsible for establishing secure architecture standards, hardening network and cloud infrastructure, improving visibility and monitoring, identifying and remediating security risks, and ensuring consistent security baselines across Inmars global environment.

The engineer will work across traditional enterprise infrastructure, remote office environments, and public, private, and hybrid cloud platforms. The role requires the ability to assess existing environments, identify control gaps, design scalable solutions, and drive remediation from architecture through operational implementation.

This position partners closely with Security Operations, Network Engineering, Cloud Engineering, Infrastructure, DevOps, application teams, and global IT organizations to integrate security into network and cloud architecture and ensure consistent, measurable security outcomes.

Key Responsibilities :

1. Network Security Engineering & Architecture :

- Design and maintain secure network architectures and security baselines for enterprise, cloud, data center, and remote-office environments.

- Develop and communicate hardened configurations for firewalls, routers, switches, VPNs, NAC platforms, wireless infrastructure, and related network technologies.

- Design, implement, and validate network segmentation and security-zone architectures.

- Assess network environments for architecture, configuration, visibility, and control gaps.

- Improve network telemetry, logging, monitoring, and threat-detection capabilities.

- Support secure remote connectivity and connectivity between on-premises and cloud environments.

- Conduct technical security assessments and control-effectiveness testing.

- Partner with network and infrastructure teams to remediate identified weaknesses.

- Support secure office expansions, acquisitions, integrations, and new infrastructure deployments.

2. Cloud Security Engineering :

- Design, implement, and maintain security controls across AWS, Azure, Google Cloud, and hybrid-cloud environments.

- Develop secure cloud architectures for public, private, and hybrid-cloud deployments.

- Identify, assess, prioritize, and remediate security risks and vulnerabilities within cloud infrastructure and cloud-hosted applications.

- Implement and maintain Cloud Security Posture Management capabilities and secure configuration standards.

- Evaluate cloud environments against internal security requirements, industry standards, and applicable regulatory frameworks.

- Partner with Cloud Engineering, DevOps, application development, and infrastructure teams to integrate security into cloud deployment and development lifecycles.

- Review cloud deployments for security-control failures, configuration errors, and visibility gaps.

- Maintain and improve cloud-security platforms and integrations, including Wiz, Corelight, cloud-native security services, and related technologies.

- Support Security Operations during investigations and incidents involving cloud environments.

- Perform post-incident analysis and help develop corrective or preventive controls.

3. Cloud & Network Security Automation :

- Develop automation for cloud and network security configuration, compliance validation, monitoring, remediation, and operational workflows.

- Use scripting languages such as Python, PowerShell, or Bash to reduce manual security processes and improve consistency.

- Partner with engineering teams to integrate security validation into infrastructure deployment pipelines.

- Apply Infrastructure as Code security practices using technologies such as Terraform, CloudFormation, or Ansible.

- Identify opportunities to automate configuration auditing, vulnerability remediation, asset discovery, and security-control validation.

- Develop scalable methods to deploy and maintain security baselines across geographically distributed environments.

4. Cloud Security Monitoring & Visibility :

- Improve security visibility using cloud-native and third-party monitoring technologies.

- Support cloud logging strategies using technologies such as AWS CloudTrail, Azure Monitor, Google Cloud Operations Suite, and centralized security monitoring platforms.

- Ensure security telemetry is integrated into enterprise monitoring and Security Operations workflows.

- Improve and maintain visibility through platforms such as Wiz and Corelight.

- Partner with the SOC to improve cloud and network detection capabilities.

5. Global Security Standards & Infrastructure Enablement :

- Ensure global and remote locations maintain enterprise network, cloud, and infrastructure security standards.

- Develop repeatable deployment standards and operational procedures for secure office infrastructure, wireless deployments, cloud connectivity, and network security controls.

- Identify regional, bandwidth, technology, or operational constraints and engineer scalable security solutions or compensating controls.

- Support security-readiness activities for acquisitions, office expansions, and rapidly scaling environments.

- Serve as a technical security liaison across regional IT, infrastructure, network, cloud, and security teams.

- Maintain accurate technical documentation for security architectures, configurations, procedures, and operational standards.

Required Qualifications :

- 7 - 10+ years of experience in security engineering, network security engineering, cloud security, infrastructure security, or a closely related discipline.

- Deep hands-on experience with enterprise network security architecture and infrastructure hardening.

- Strong experience with public-cloud environments such as AWS, Azure, and/or Google Cloud.

- Strong understanding of :

1. Firewalls and secure network architecture

2. VPN and secure remote connectivity

3. Network segmentation

4. NAC

5. IDS/IPS

6. Enterprise wireless security

7. Cloud networking and network security controls

8. Cloud security architecture

9. Cloud IAM and access control

10. Encryption and data-protection controls

11. Cloud logging and monitoring

- Experience identifying and remediating vulnerabilities and configuration weaknesses across network and cloud environments.

- Experience with cloud-native security technologies and third-party cloud-security platforms.

- Experience with scripting and automation using Python, PowerShell, Bash, or similar languages.

- Working knowledge of Infrastructure as Code and secure cloud provisioning practices.

- Strong understanding of security frameworks and hardening standards such as NIST and CIS.

- Ability to communicate risks, architecture decisions, remediation strategies, and operational priorities to both technical and non-technical stakeholders.

- Strong troubleshooting and problem-solving skills in complex, distributed environments.

Preferred Qualifications :

- Experience with Palo Alto, Wiz, Corelight, or comparable cloud/network security platforms.

- Experience with AWS Security Hub, Azure security tooling, Google Cloud Security Command Center, or equivalent cloud-native security technologies.

- Experience securing containers, Kubernetes, Docker, and serverless environments.

- Experience developing security controls through Terraform, CloudFormation, Ansible, or similar technologies.

- Experience integrating cloud security validation into DevOps or CI/CD workflows.

- Experience securing distributed or international infrastructure environments.

- Experience supporting acquisitions, office integrations, or greenfield infrastructure deployments.

- Security certifications such as :

1. CISSP

2. CCSP

3. AWS Certified Security

4. Google Professional Cloud Security Engineer

5. GIAC certifications

6. CCNP Security or equivalent

Success Profile :

The successful candidate will be :

- A highly technical, hands-on security engineer who can move comfortably between architecture and implementation.

- Capable of independently assessing network and cloud environments and driving remediation.

- Comfortable operating across traditional enterprise infrastructure and modern cloud platforms.

- Skilled at translating enterprise security requirements into practical, scalable engineering controls.

- Strong in automation and interested in replacing repetitive operational processes with engineered solutions.

- Effective at collaborating with Security, IT, Network, Cloud, DevOps, and application engineering teams.

- Comfortable working in fast-paced, evolving, globally distributed environments.

Skills

Network Security, Cloud Security, Firewall, Security Monitoring Tools, VPN, NIST, IAC Terraform, CISSP, CCSP, Vulnerability Management