Cloud Network Security

Tekskills; Hyderabad; Hybrid; INR 2,400,000 - 3,600,000; Full time

Job summary

Tekskills is seeking an experienced cloud security specialist to focus on AWS and/or GCP network security for enterprise environments. Responsibilities include designing secure VPCs, managing subnets, and enforcing network isolation across multi-cloud deployments, with a strong emphasis on automation and IaC using Terraform.

Ideal candidates will have 5+ years hands-on cloud security experience, expertise in Terraform and CloudFormation, and the ability to guide cloud programs while

Job description

Role & responsibilities

Min 5+ years of hands-on experience in AWS and/or GCP cloud network security

• Deep knowledge in configuring and managing VPCs, Cloud Firewalls, Security Groups, NAT Gateways, Route Tables, and Subnets
• Proven expertise in Infrastructure as Code specifically with Terraform

Detailed JD/ Key Responsibilities:

• Engage with multiple cloud and networking stakeholders, understand the requirements for complex enterprise cloud environment
• Provide cloud and network security expertise and guidance to the cloud programs including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms.
• Collaborate with enterprise architects and SMEs to deliver complete security architecture solutions
• Lead Cloud network security initiatives with designs, patterns and develop/deliver scalable and security terraform modules
• Design and manage secure VPCs across AWS and GCP
• Maintain network isolation using Security Groups, NACLs, Subnets, NATs
• Implement Ingress/Egress controls and log them for auditing
• Experience in configuring route tables, subnets, firewall rules, and enforce multi-AZ architecture
• Secure hybrid connectivity with VPNs or Interconnects
• Automate network deployments using Terraform (mandatory), CloudFormation
• Enforce consistent and secure provisioning through CI/CD pipelines
• Utilize AWS Config, Security Hub, Security Command Center, CloudWatch, and SIEM for monitoring and compliance
• Configure & ensure TLS/SSL encryption for all data in transit within & outside of the cloud .

Preferred candidate profile