Cloud Network Security Engineer

Cloud Hybrid Technologies LLC; Dallas (TX); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Cloud Hybrid Technologies LLC in Dallas, TX, seeks a senior cloud security professional to lead IaC security scanning, firewall design, and risk alignment across AWS, Azure, and GCP.

You will integrate IaC scanners into CI/CD, remediate findings, and develop policies while tuning native cloud firewalls. This role requires 7+ years in cloud security or DevSecOps, with hands-on IaC tools and certifications preferred.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency with security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation using PowerShell, Bash and Python, etc.

Responsibilities

• Integrate IaC security scanning into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.
• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.
• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Skills

Cloud security

DevSecOps

Automation scripting

Education

AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Tools

Terraform

CloudFormation

Checkov

Snyk IaC

Prisma Cloud

Aqua

Powershell

Bash

Python

Job description

Job Description-

IaC Security Scanning & Hardening:

• Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.

Firewall Implementation & Tuning:

• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.

Risk Management & Compliance:

• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Requirements:

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.

Cloud Hybrid is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. Cloud Hybrid will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will Cloud Hybrid require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract