Senior Cloud Network & Security Engineer – GCP / Palo Alto

Seleccionconsulting; Hyderabad; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Seleccionconsulting in Hyderabad, India, seeks a Senior Cloud Network & Security Engineer with 10+ years in network engineering, cloud networking, and security. You will focus on GCP networking, GKE networking, and Palo Alto VM-Series firewalls, VPN, Cloudflare, cloud gateways, automation, and hybrid connectivity.

You will design, implement, secure, troubleshoot, and maintain highly available cloud network infrastructure and security solutions, with strong emphasis on end‑to‑end connectivity and

Qualifications

• 10+ years of overall experience in Network Engineering, Cloud Networking, Infrastructure, or Cloud Security.
• 5+ years of hands-on GCP networking experience.
• Strong hands-on experience with GKE networking, architecture, operations, and troubleshooting.
• Strong experience with Palo Alto Networks firewalls, preferably VM-Series on GCP.
• Experience with Palo Alto Primary/Secondary or Active-Passive HA.
• Strong experience with Palo Alto firewall policies, NAT, routing, security zones, and security profiles.
• Hands-on experience with IPsec VPN and GlobalProtect.
• Experience with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and troubleshooting.
• Hands-on experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.
• Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.
• Experience with Terraform/IaC, Ansible, GitOps, and CI/CD.
• Scripting experience in Python, Bash, or PowerShell.
• Experience with Datadog and cloud monitoring/logging.
• Strong understanding of cloud security, network segmentation, IAM, Zero Trust, and DevSecOps.
• Experience with hybrid cloud and on-premises connectivity.

Responsibilities

• Design, implement, secure, troubleshoot, and maintain highly available cloud network infrastructure and security solutions.
• Collaborate with Security and DevSecOps teams to implement security best practices and controls.
• Provide technical guidance and collaborate with Cloud, DevOps, Security, and Development teams.
• Support security incidents, root-cause analysis, and remediation activities.
• Automate infrastructure using Terraform, Ansible, and GitOps practices.
• Develop automation/scripts using Python, Bash, or PowerShell.

Skills

GCP networking

GKE networking

Palo Alto VM-Series

VPN

Cloudflare

Terraform

Ansible

GitOps

Datadog monitoring

Python/Bash scripting

Zero Trust

Hybrid cloud connectivity

Network security

TCP/IP DNS BGP OSPF

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field

Tools

GCP

GKE

Palo Alto VM-Series

Cloudflare

Terraform

Ansible

GitOps

Datadog

Job description

Department: IT (On-Prem)and Cloud Infra Managed Services Delivery

Experience: 10+ Years

Job Summary

We are looking for a Senior Cloud Network & SecurityEngineer with 10+ years of overall experience in networkengineering, cloud networking, and security. The candidate should have stronghands-on experience with GCP networking, GKE networking, Palo Alto Networksfirewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybridconnectivity.

The role will be responsible for designing, implementing,securing, troubleshooting, and maintaining highly available cloud networkinfrastructure and security solutions.

Key Responsibilities

GCP & GKE Networking

• Design,implement, and manage GCP network infrastructure, including VPC,Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPCPeering, Private Service Connect, and Load Balancing.
  
• Stronghands-on experience with GKE networking, including VPC-nativeclusters, Pod/Service networking, Alias IPs, Network Policies, Ingress,DNS, firewall rules, Private GKE, and GKE connectivity.
  
• TroubleshootGCP/GKE connectivity, routing, DNS, ingress/egress, and performanceissues.
  
• Designsecure connectivity between GCP, GKE, on-premises, and other cloudenvironments.
  
• Design,deploy, configure, and manage Palo Alto VM-Series firewalls on GCP.
  
• Managefirewall policies, NAT, routing, security zones, application controls,threat prevention, URL filtering, and logging.
  
• Designand manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover.
  
• Configureand troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN.
  
• ManagePalo Alto PAN-OS upgrades/updates, licensing, subscriptions,configuration backup/restore, and license-related issues.
  
• Performfirewall rule optimization, troubleshooting, and security monitoring.
  

Cloudflare & Cloud Gateway

• Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, andtraffic management.
  
• Designand manage secure cloud gateway / internet gateway architectures,including ingress/egress traffic, NAT, routing, and centralized securityinspection.
  
• IntegrateCloudflare, Palo Alto, GCP Load Balancing, and application environments.
  
• Implementnetwork security, segmentation, IAM, Zero Trust, encryption, firewallcontrols, and secure ingress/egress.
  
• Collaboratewith Security and DevSecOps teams to implement security best practices andcontrols.
  
• Supportsecurity incidents, root-cause analysis, and remediation activities.
  

Automation & Operations

• Automateinfrastructure using Terraform, Ansible, and GitOps practices.
  
• Developautomation/scripts using Python, Bash, or PowerShell.
  
• Use Datadogand GCP/Palo Alto monitoring and logging for performance monitoringand troubleshooting.
  
• Maintainarchitecture diagrams, configuration standards, and operationaldocumentation.
  
• Providetechnical guidance and collaborate with Cloud, DevOps, Security, andDevelopment teams.
  

Required Skills & Experience

• 10+years of overall experience in Network Engineering, Cloud Networking,Infrastructure, or Cloud Security.
  
• 5+years of hands-on GCP networking experience.
  
• Stronghands-on experience with GKE networking, architecture, operations, andtroubleshooting.
  
• Strongexperience with Palo Alto Networks firewalls, preferably VM-Serieson GCP.
  
• Experiencewith Palo Alto Primary/Secondary or Active-Passive HA.
  
• Strongexperience with Palo Alto firewall policies, NAT, routing, securityzones, and security profiles.
  
• Hands-onexperience with IPsec VPN and GlobalProtect.
  
• Experiencewith Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, andtroubleshooting.
  
• Hands-onexperience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.
  
• Strongknowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.
  
• Experiencewith Terraform/IaC, Ansible, GitOps, and CI/CD.
  
• Scriptingexperience in Python, Bash, or PowerShell.
  
• Experiencewith Datadog and cloud monitoring/logging.
  
• Strongunderstanding of cloud security, network segmentation, IAM, Zero Trust,and DevSecOps.
  
• Experiencewith hybrid cloud and on-premises connectivity.
  

Qualifications

• Bachelor'sdegree in Computer Science, Information Technology, Engineering, orrelated field.
  
• Strongcommunication, analytical, troubleshooting, and problem-solving skills.
  
• Abilityto work independently and provide technical leadership to engineeringteams.
  

Preferred Certifications

• GoogleCloud Professional Cloud Architect
  
• PaloAlto PCNSA / PCNSE or equivalent hands-on expertise.
  

GCP | GKE | Palo Alto VM-Series | PAN-OS | GlobalProtect| Cloudflare | VPN | VPC | Cloud Router | Cloud NAT | Load Balancing |Terraform | Ansible | GitOps | Datadog | Python/Bash | DevSecOps

Ideal Candidate

A 10+ year senior cloud network/security professional with strong hands-on expertise in GCP + GKE Networking + Palo Alto VM-Series+ Palo Alto HA + VPN + Cloudflare + Cloud Gateway + Security + Terraform,capable of independently handling enterprise cloud networking, securityarchitecture, production troubleshooting, and automation.