Senior Cloud Network Engineer

Anblicks Inc.; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

A technology solutions firm in Hyderabad seeks a Senior Cloud Network Engineer to build and maintain secure network infrastructure. Responsibilities include developing Terraform infrastructure as code, automating firewall deployments, and managing network security. The ideal candidate has 8+ years of experience in network engineering, expertise in cloud environments, and excellent problem-solving skills. This role requires a strong understanding of compliance and automation, and certifications like AWS Certified Advanced Networking are preferred.

Qualifications

• Strong background in heavy-duty network engineering.
• 3+ years dedicated to writing IaC using Terraform/HCL.

Responsibilities

• Develop and maintain modular Terraform code for networking lifecycle.
• Automate deployment of Palo Alto VM-Series firewalls.
• Implement Auto Scaling Groups for firewalls.
• Standardize networking patterns across multiple cloud platforms.
• Manage network security policies using cloud native tooling.
• Continuously monitor network state with AWS Config Rules.
• Create and maintain detailed network documentation.
• Act as final escalation point for complex network failures.

Skills

Strong Terraform/IaC proficiency

Automated Firewall Specialist

Python/Scripting

Cloud Fluency

Version Control Proficiency

Collaborative Automation

Compliance Tooling

Automated Remediation

Policy Auditing

Education

8+ Years Engineering

Job description

We are seeking a Senior Cloud Network Engineer to build, automate, and maintain secure network infrastructure. This is a high-execution role focused on "Infrastructure as Code." You will be responsible for the actual delivery and lifecycle of cloud networking and security components using Terraform.

Key Responsibilities

• Write and Maintain Production-Grade IaC: Develop and maintain modular Terraform code to manage the entire networking lifecycle, including cloud-native constructs (VPCs/VNets, TGW, DirectConnect/ExpressRoute, Route Tables, NACLs/NSGs/SGs) and third-party appliance deployment.
• Palo Alto VM-Series Automation: Hands‑on responsibility for the automated bootstrapping and deployment of VM‑Series firewalls (managing init‑cfg, licenses, and software versions via S3/Azure Storage).
• Autoscaling & Resilience: Implement and manage Auto Scaling Groups (AWS) or Scale Sets (Azure) for firewalls, including integration with Gateway Load Balancer (GWLB) and managing lifecycle hooks.
• Multi‑Cloud Expansion: Standardize networking patterns across AWS/Azure, with the opportunity to apply these skills to GCP, OCI, and Ali Cloud environments.
• Automated Policy Enforcement: Use cloud native tooling (AWS Firewall Manager/Azure Policy/Security Center) to centrally manage and enforce network security policies across all accounts and VPCs/VNets, ensuring consistent security group rules and WAF configurations.
• Compliance‑as‑Code & Monitoring: Implement and manage AWS Config Rules and custom Lambda checks to continuously monitor network state. Build automated remediation for non‑compliant resources (e.g., auto‑applying default SG to ALBs).
• Guardrail Implementation: Deploy Service Control Policies (SCPs) and IAM boundaries to prevent "shadow networking" and ensure all deployments adhere to the organizational security baseline.
• Documentation: Create and maintain detailed network documentation, including topology diagrams, configuration standards, and operational procedures.
• Tier‑3 Forensic Troubleshooting: Act as the final escalation point for complex cloud/hybrid network failures. Perform deep‑packet analysis (TCPDump/Wireshark) and use cloud‑native observability (Flow Logs, Reachability Analyzer) to conduct data‑driven RCA.

Person Specification/Requirements

Education & Experience

8+ Years Engineering: Must have a background in heavy‑duty network engineering, with the last 3+ years dedicated to writing IaC (Terraform/HCL).

Technical Skills

• Strong Terraform/IaC proficiency: Write reusable, dry, and version‑controlled modules. Deep understanding of state management and providers.
• Automated Firewall Specialist: Bootstrapped virtual appliances and managed stateful firewall clusters in an autoscaling environment.
• Python/Scripting: Use Python to interact with Cloud APIs (Boto3) and automate tasks that IaC cannot handle alone.
• Cloud Fluency: Deep expertise in AWS and Azure; experience with GCP, OCI, or Ali Cloud is a significant plus.
• Version Control Proficiency: Use Git for daily work, manage branches, commit clean code, and participate in Pull Requests (PR) for peer reviews.
• Collaborative Automation: Work in a team environment where network changes are tracked in a repository rather than performed manually in a console.
• Compliance Tooling: Hands‑on experience with AWS Config, AWS Firewall Manager, AWS Security Hub (or Azure equivalents like Azure Policy and Microsoft Defender for Cloud).
• Automated Remediation: Write Python/Lambda functions or use Systems Manager (SSM) documents to auto‑fix out‑of‑compliance network resources.
• Policy Auditing: Translate regulatory requirements (e.g., NIST) into automated technical checks within a cloud environment.

Soft Skills

• Automate‑First Mindset: Aversion to manual "point‑and‑click" configuration (ClickOps). Look for ways to turn repetitive tasks into code.
• Engineering Rigor: Disciplined approach to changes. Believe that if a change isn’t in Git, it didn’t happen. Value peer code reviews and include testing and documentation in "done".
• Operational Empathy: Write code and documentation that your future self (and teammates) can understand at 3:00 AM during a production incident.
• Pragmatic Problem Solving: Balance "perfect" automation with immediate business needs; decide when to build a robust module versus a quick remediation script.
• Collaborative Mindset: Mentor others in IaC best practices and participate in a "blameless" post‑mortem culture when automation fails.

Certifications (Preferred)

• AWS Certified Advanced Networking – Specialty
• Google Professional Cloud Network Engineer