Cloud Security Architect
Description
Job Summary
We are looking for an experienced Lead Cloud Security Engineer with strong expertise in AWS cloud security, network infrastructure, and enterprise firewall technologies. The ideal candidate will be responsible for designing, implementing, securing, monitoring, and supporting both on-premises and AWS cloud environments. The role requires hands-on experience with Fortinet and Palo Alto firewalls, Cisco networking, AWS networking, endpoint security, and cloud security best practices.
Key Responsibilities
· Design, implement, and manage secure network and cloud infrastructure.
· Configure, administer, and troubleshoot Fortinet (FortiGate) and Palo Alto Networks firewalls.
· Manage Cisco routing, switching, and enterprise networking solutions.
· Configure and monitor Intrusion Prevention Systems (IPS) to secure network infrastructure.
· Administer Trend Micro Antivirus/Endpoint Security solutions.
· Design and manage AWS networking components, including:
o Virtual Private Clouds (VPCs)
o Public and Private Subnets
o Route Tables
o Internet Gateways
o NAT Gateways
o Security Groups
o Network ACLs
· Deploy and manage AWS services including:
o EC2
o S3
o IAM
o Elastic Load Balancer (ELB/ALB/NLB)
· Support cloud architecture following AWS Well-Architected Framework and AWS Solution Architect Associate best practices.
· Perform network security assessments, vulnerability management, and remediation activities.
· Monitor cloud and network environments for security threats and incidents.
· Develop and maintain security documentation, standard operating procedures (SOPs), and architecture diagrams.
· Collaborate with infrastructure, DevOps, and application teams to implement security best practices.
· Ensure compliance with organizational security policies and industry standards.
Required Skills
Network Security
· Fortinet FortiGate Firewalls
· Palo Alto Networks Firewalls
· Cisco Routing & Switching
· VLANs, VPNs, NAT, Routing Protocols
· Intrusion Prevention Systems (IPS)
· Network Troubleshooting
AWS Cloud
· AWS VPC
· Security Groups
· Network ACLs
· Route Tables
· Internet Gateway
· NAT Gateway
· EC2
· S3
· IAM
· Elastic Load Balancer
· AWS Networking Concepts
· AWS Security Best Practices
Endpoint Security
· Trend Micro Antivirus/Endpoint Security
· Endpoint Protection
· Malware Protection
· Threat Detection
Security & Compliance
· Vulnerability Assessment
· Security Hardening
· Incident Response
· Risk Assessment
· Security Compliance
· Cloud Security Best Practices
Required Qualifications
· Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
· 7–10 years of experience in Network Security and Cloud Security.
· Hands-on experience with AWS networking and cloud infrastructure.
· Strong experience managing Fortinet and Palo Alto firewalls.
· Good understanding of Cisco networking technologies.
· Experience with IPS and endpoint security solutions.
· Strong troubleshooting and analytical skills.
· Excellent communication and stakeholder management skills.
Preferred Certifications
· AWS Certified Solutions Architect – Associate
· AWS Certified Security – Specialty
· Palo Alto PCNSA/PCNSE
· Fortinet NSE 4/5/7
· Cisco CCNA/CCNP
· CompTIA Security+
· CISSP (Pref