Senior Network & Cloud Security Engineer

Claranet Portugal; Lisboa; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Claranet Portugal seeks a Senior Network Cloud Engineer to join our internal team in Lisbon or Porto. You will design secure, scalable network architectures across Azure and multi-cloud environments and own hybrid connectivity strategies.

Strong automation and IaC skills are essential for success. Ideal candidates have deep Azure networking expertise, SecOps experience, and Kubernetes networking knowledge, with a proactive, collaborative mindset and excellent communication.

Qualificações

• Deep expertise in Azure networking, TCP/IP, BGP, OSPF, DNS, and security.
• Experience operating in hybrid and multi-cloud environments.
• Strong background in network automation and IaC.
• Hands-on SecOps, cloud security controls, and incident response.
• Kubernetes networking knowledge, ideally AKS.
• Excellent problem-solving and cross-team communication.

Responsabilidades

• Design and evolution of secure, scalable network architectures across Azure and multi-cloud environments.
• Architect and manage advanced Azure networking services, including VNets, NSGs, Application Gateways, Load Balancers, VPN Gateways, ExpressRoute, Azure Firewall, and Private Endpoints.
• Design secure hybrid connectivity across on-premises, Azure, and GCP environments, ensuring robust routing, performance, and security.
• Take ownership of network optimisation, diagnostics, and troubleshooting, using tools such as Azure Network Watcher, traffic analytics, Wireshark, and tcpdump.
• Strengthen network security through micro-segmentation, Zero Trust principles, and secure access controls.
• Develop automation and Infrastructure as Code solutions using Terraform, ARM templates, Bicep, PowerShell, Python, or Bash.
• Design and support container networking for AKS and other Kubernetes platforms, including CNI, ingress, service mesh, and network policy considerations.
• Produce clear technical documentation, topology diagrams, and operational standards to support governance and repeatability.
• Collaborate closely with security, platform, and application teams to ensure alignment between network design, security posture, and business objectives.

Conhecimentos

Azure networking

Multi-cloud

Network automation

SecOps

Kubernetes networking

Terraform

Wireshark

Ferramentas

Wireshark

tcpdump

Terraform

ARM templates

Bicep

PowerShell

Python

Descrição da oferta de emprego

We\'re fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers\' challenges and to build something stronger together.

Right now, we are looking for a Senior Network Cloud Engineerto integrate our internal team, based in Lisbon or Porto.

Your responsibilities include:

• Design and evolution of secure, scalable, and resilient network architectures across Azure and multi-cloud environments;
• Architect and manage advanced Azure networking services, including VNets, NSGs, Application Gateways, Load Balancers, VPN Gateways, ExpressRoute, Azure Firewall, and Private Endpoints;
• Design secure hybrid connectivity across on-premises, Azure, and GCP environments, ensuring robust routing, performance, and security;
• Take ownership of network optimisation, diagnostics, and troubleshooting, using tools such as Azure Network Watcher, traffic analytics, Wireshark, and tcpdump;
• Strengthen network security through micro-segmentation, Zero Trust principles, and secure access controls;
• Support SecOps activities across Azure, including alert management, security recommendations, and response to EOL-related impact in complex tenant environments;
• Develop automation and Infrastructure as Code solutions using Terraform, ARM templates, Bicep, PowerShell, Python, or Bash;
• Design and support container networking for AKS and other Kubernetes platforms, including CNI, ingress, service mesh, and network policy considerations;
• Produce clear technical documentation, topology diagrams, and operational standards to support governance and repeatability;
• Collaborate closely with security, platform, and application teams to ensure alignment between network design, security posture, and business objectives.

You must have:

• Deep expertise in Azure networking and strong understanding of TCP/IP, BGP, OSPF, DNS, and network security;
• Proven experience operating in hybrid and multi-cloud environments;
• Strong background in network automation and Infrastructure as Code;
• Hands-on experience with SecOps, cloud security controls, and incident response;
• Solid Kubernetes networking knowledge, ideally in AKS;
• Excellent problem-solving skills, with the ability to operate effectively in complex, fast-moving environments;
• Strong communication skills and the ability to influence technical decisions across teams.

We value:

• Exposure to GCP networking services such as VPC, Cloud Load Balancing, Cloud CDN, and Cloud Interconnect;
• Experience with SD-WAN, network virtualisation, and advanced orchestration platforms;
• Knowledge of Istio, Linkerd, ingress controllers, and network policies;
• Familiarity with compliance and regulatory considerations;
• Experience with multi-cloud networking patterns, performance testing, and global load balancing strategies.
• Certifications (It is not required, but it is considered a plus): Microsoft Certified: Azure Network Engineer Associate; Google Professional Cloud Network Engineer; Certified Kubernetes Administrator (CKA); Certified Kubernetes Security Specialist (CKS); HashiCorp Certified: Terraform Associate; Cisco Certified Network Professional (CCNP) Enterprise; Microsoft Certified: Azure Security Engineer Associate; Google Professional Cloud Security Engineer.