Network Security Cloud Engineer

Fixity Technologies; Phoenix (AZ); On-site; USD 130,000 - 190,000; Full time

Job summary

Fixity Technologies is seeking a Cloud Network Security Engineer to design, develop, and implement secure cloud network architectures across public and private cloud platforms. You will engineer and automate security controls including cloud firewalls, Security Groups, Network ACLs, and cloud-native services, and develop Infrastructure-as-Code using Terraform or CloudFormation.

You will collaborate with Cloud, Network, and Security teams to enforce enterprise security standards, improve

Qualifications

• 5+ years of experience in Network Security, Cloud Security, or Infrastructure Security.
• Hands-on experience securing AWS, Azure, Google Cloud, or Oracle Cloud environments.
• Strong understanding of: VPCs & VNets, Routing, Private Connectivity, Identity-Aware Access, Encryption, Network Policy Enforcement.
• Experience with Infrastructure-as-Code: Terraform, CloudFormation.
• Experience with: Firewall policy automation, Cloud-native security controls.
• Knowledge of SIEM, logging, monitoring, and network telemetry.
• Experience with enterprise security technologies: NGFW, WAF, IDS/IPS, Secure Web Gateways, DNS Security, ZTNA, SaaS security.
• Hands-on knowledge of: CASB, SSE, SASE, ZTNA; experience integrating SaaS apps with Okta, Ping Identity, SAML, OAuth, OIDC.
• Experience supporting enterprise cloud migration initiatives and automation initiatives.

Responsibilities

• Design, develop, and implement secure cloud network architectures across public and private cloud platforms.
• Engineer and automate network security controls including: Cloud firewalls, Security Groups, Network ACLs, Cloud-native security services.
• Develop and maintain Infrastructure-as-Code using Terraform, CloudFormation, or similar tools.
• Implement secure hybrid connectivity between on-premises data centers and cloud environments.
• Improve network visibility through logging, monitoring, SIEM integration, and threat detection.
• Evaluate emerging cloud networking and security technologies through Proof of Concepts (POCs).
• Participate in architecture and security reviews.
• Drive automation and operational efficiency through scripting and security orchestration.

Skills

Network Security

Cloud Security

Infrastructure Security

AWS

Azure

GCP

VPC/VNet

Routing

Private Connectivity

Identity-Aware Access

Encryption

Policy Enforcement

Terraform

CloudFormation

Firewall Automation

NGFW

WAF

IDS/IPS

ZTNA

SASE

Okta

SAML

OAuth

OIDC

SaaS Security

CASB

SSE

Automation

Scripting

Multi-cloud

Tools

Terraform

CloudFormation

Okta

SAML

OAuth

OIDC

SIEM

Job description

• Design, develop, and implement secure cloud network architectures across public and private cloud platforms.
• Engineer and automate network security controls including:
• Cloud firewalls
• Security Groups
• Network ACLs
• Cloud-native security services
• Develop and maintain Infrastructure-as-Code using Terraform, CloudFormation, or similar tools.
• Implement secure hybrid connectivity between on-premises data centers and cloud environments.
• Configure and support:
• VPN
• AWS Direct Connect
• Transit Gateway
• VPC/VNet Peering
• Private Link
• Service Mesh technologies
• Partner with Cloud Engineering, Network Engineering, and Security teams to implement enterprise security standards.
• Improve network visibility through logging, monitoring, SIEM integration, and threat detection.
• Evaluate emerging cloud networking and security technologies through Proof of Concepts (POCs).
• Participate in architecture and security reviews.
• Drive automation and operational efficiency through scripting and security orchestration.

Required Skills

• 5+ years of experience in Network Security, Cloud Security, or Infrastructure Security.
• Hands-on experience securing AWS, Azure, Google Cloud, or Oracle Cloud environments.
• Strong understanding of:
• VPCs & VNets
• Routing
• Private Connectivity
• Identity-Aware Access
• Encryption
• Network Policy Enforcement
• Experience with Infrastructure-as-Code:
• Terraform
• CloudFormation
• Experience with:
• Firewall policy automation
• Cloud-native security controls
• Knowledge of SIEM, logging, monitoring, and network telemetry.
• Experience with enterprise security technologies:
• Next-Generation Firewalls (NGFW)
• Web Application Firewalls (WAF)
• IDS/IPS
• Secure Web Gateways
• DNS Security
• Zero Trust Network Access (ZTNA)
• Experience securing SaaS environments and integrations.
• Hands‑on knowledge of:
• CASB
• SSE
• SASE
• ZTNA
• Experience integrating SaaS applications with:
• Okta
• Ping Identity
• Experience with:
• SAML
• OAuth
• OpenID Connect (OIDC)
• Experience supporting enterprise cloud migration initiatives.
• Experience leveraging AI tools to automate engineering tasks and improve operational efficiency.

Preferred Certifications

• AWS Certified Security – Specialty
• AWS Advanced Networking – Specialty
• Azure Security Engineer Associate
• Google Professional Cloud Network Engineer
• Google Professional Cloud Security Engineer
• CCNP Security or equivalent

Nice to Have

• Experience with multi‑cloud environments.
• Strong scripting and automation skills.
• Experience working in large enterprise infrastructure environments.
• Excellent troubleshooting, communication, and collaboration skills.