Cloud Network Security Engineer

TechDigital Group; Bellevue (WA); On-site; USD 120,000 - 150,000; Full time

Job summary

A technology firm is seeking a Cloud Network Security Engineer to strengthen their security practices. The successful candidate will integrate security scanning tools into CI/CD pipelines, analyze IaC scans, and implement firewall rules across various cloud platforms. Applicants should have over 7 years of experience in cloud security and deep knowledge of firewalls and IaC tools like Terraform. Preferred qualifications include AWS/Azure/GCP certifications. This role requires expertise in various automation techniques and security standards.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in Automation by using Powershell, Bash and Python.

Responsibilities

• Integrate IaC security scanning tools into CI/CD pipelines.
• Analyze and remediate findings from IaC scans.
• Design and implement firewall rules across cloud platforms.
• Perform rule optimization and conduct audits of configurations.

Skills

Cloud security

Network security

DevSecOps

Terraform

CloudFormation

AWS

Azure

GCP

Automation

Education

Certifications in AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Tools

Checkov

Prisma Cloud

Aqua

Snyk

Job description

Cloud Network Security Engineer

Job Description

Key Responsibilities

IaC Security Scanning & Hardening

• Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.

Firewall Implementation & Tuning

• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.

Risk Management & Compliance

• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Requirements

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands‑on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud‑native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.