Cloud Network Security Architect / Engineer

Georgia IT, Inc.; Brasil; Remote; BRL 89,000 - 134,000; Full time

Job summary

Casado is seeking an experienced Cloud Network Security Architect / Engineer to design, implement, and secure enterprise AWS cloud network environments. The role focuses on securing cloud networks with Palo Alto and FortiGate firewalls and implementing GWLB architectures for centralized inspection.

You will design ingress/egress flows, implement Zero Trust segmentation, and automate security configuration using Terraform, Python, or Ansible, collaborating with cross-functional teams in a remote

Qualifications

• Experience designing secure AWS cloud network architectures.
• Hands-on firewall management with Palo Alto or Fortinet.
• Strong knowledge of GWLB, VPCs, routing, GWs and security groups.
• Experience implementing Zero Trust network segmentation.

Responsibilities

• Design and implement secure AWS cloud network architectures.
• Develop security solutions using Palo Alto and/or FortiGate firewalls.
• Design and implement GWLB architectures for centralized inspection.
• Design secure ingress and egress traffic flows in AWS.
• Implement network segmentation based on Zero Trust.
• Ensure north-south and east-west traffic security controls.
• Develop secure VPC, subnet, routing, firewall, and inspection layouts.
• Automate security and network config with Terraform, Python or Ansible.
• Collaborate with cloud, network, cybersecurity and DevOps teams.
• Troubleshoot complex network security and connectivity issues.
• Create architecture documentation, diagrams and standards.
• Support security assessments and compliance needs.

Skills

AWS cloud networking

Zero Trust design

Firewall administration

Troubleshooting

Automation & IaC

Terraform

Python

Ansible

Network security concepts

Tools

Palo Alto Networks

FortiGate

GWLB (AWS Gateway Load Balancer)

Job description

Title: Cloud Network Security Architect / Engineer

Location: Brazil (Remote)

Type: Contract

Job Description

We are seeking an experienced Cloud Network Security Architect / Engineer to design, implement, and secure enterprise AWS cloud network environments.

Key Responsibilities

• Design and implement secure AWS cloud network security architectures.
• Develop security solutions using Palo Alto Networks and/or FortiGate firewalls.
• Design and implement AWS Gateway Load Balancer (GWLB) architectures for centralized traffic inspection.
• Design secure ingress and egress traffic flows across AWS environments.
• Implement network segmentation based on Zero Trust security principles.
• Design and enforce security controls for north-south and east-west traffic.
• Develop secure VPC, subnet, routing, firewall, and inspection architectures.
• Implement threat inspection and traffic filtering across cloud environments.
• Integrate cloud network security controls with enterprise security architecture.
• Design highly available and resilient security infrastructure.
• Automate security and network configuration using Terraform, Python, Ansible, or similar technologies.
• Collaborate with cloud, network, cybersecurity, DevOps, and application teams.
• Troubleshoot complex network security, routing, and connectivity issues.
• Develop security architecture documentation, diagrams, standards, and operational procedures.
• Support security assessments, vulnerability remediation, and compliance requirements.

Required Skills

• Strong experience with AWS cloud networking and security.
• Hands-on experience with Palo Alto Networks and/or FortiGate firewalls.
• Strong knowledge of AWS Gateway Load Balancer (GWLB).
• Experience designing Zero Trust network security and segmentation.
• Strong understanding of ingress/egress traffic controls and security inspection.
• Knowledge of AWS VPC, Transit Gateway, routing, Security Groups, NACLs, and load balancing.
• Strong understanding of TCP/IP, DNS, routing, VPN, and network security concepts.
• Experience with Infrastructure-as-Code and automation.
• Strong troubleshooting and analytical skills.
• Ability to develop enterprise-level security architecture and technical documentation.

Preferred Qualifications

• AWS security or networking certification.
• Palo Alto PCNSE or equivalent firewall certification.
• Fortinet certification or equivalent experience.
• Experience with AWS Network Firewall and other cloud-native security services.
• Experience implementing cloud-based Zero Trust architectures.
• Strong Terraform, Python, or Ansible experience.
• Experience integrating cloud security with SIEM, SOC, and security monitoring platforms.
• Experience working in large enterprise or multi-cloud environments.