Cloud Network Security Specialist

Bottomline It; Gauteng; On-site; ZAR 500 000 - 700 000; Full time

Job summary

A leading tech firm in South Africa is seeking a Cloud Network Security Specialist to design, implement, and manage the security of network infrastructures in cloud environments. The ideal candidate has over 3 years of experience in cloud network security, deep networking fundamentals, and proficiency in cloud platforms like AWS or Azure. Responsibilities include monitoring network traffic, configuring firewalls, and utilizing Infrastructure as Code tools to ensure compliance. This role offers competitive compensation and opportunities for professional growth.

Qualifications

• 3+ years in cloud network security or related role.
• Expert in TCP/IP, DNS, BGP, OSI model, subnetting, and routing.
• Proficiency in Terraform or CloudFormation.

Responsibilities

• Designing secure cloud network architectures.
• Configuring and managing firewalls.
• Monitoring network traffic and analyzing logs.
• Using IaC tools for secure network configurations.

Skills

Deep networking fundamentals

Cloud platform proficiency

Automation & scripting

Strong understanding of cloud security

Problem-solving

Communication

Education

Bachelor’s degree in computer studies or related field

Tools

Terraform

AWS

Azure

Kubernetes

Splunk

Job description

Introduction

A Cloud Network Security Specialist is the professional responsible for designing, implementing, managing, and monitoring the security of an organization's network infrastructure within cloud environments (like Huawei, AWS, Azure, or Google Cloud).

Their primary goal is to protect cloud-based data, applications, and systems from cyber threats while maintaining connectivity and ensuring optimal performance. They are the architects of a "secure by design" cloud network.

Duties & Responsibilities

1. Design & Architecture: Designing secure cloud network architectures. Elastic and flexible tenant network services, such as VPC, DNS, QoS, load balancer, elastic IP, NAT gateway, VPN, etc. Manage the SDN controller implements flexible, centralized, and fine‑grained management and control of network resources, enabling the plug‑and‑play of devices, and facilitates the end‑to‑end automated network delivery process. An optional SDN analyzer is equipped with a large‑scale data engine and an AI library, enabling the visualization of application traffic paths and intelligent operation and maintenance. VxLAN technology enables network virtualization and resource pooling, resolving the IP address overlapping issue with VPC for isolating various applications and facilitating application migrations. Supports IPv4 / IPv6 dual‑stack network. Implements network segmentation strategies (utilizing subnets, security groups, and NACLs) to establish security boundaries. Planning and deploying hybrid and multi‑cloud connectivity (using VPNs, Direct Connect, ExpressRoute). Architecting a "Zero Trust" network model where trust is never assumed.

2. Implementation & Configuration: Configuring and managing firewalls (including next‑generation firewalls like Palo Alto, Check Point, or native cloud firewalls). Setting up and tuning web application firewalls (WAFs) to protect web apps from common exploits. Implementing intrusion detection / prevention systems (IDS / IPS). Configuring secure routing and gateways to control traffic flow.

3. Identity & Access Management for Networking: While not solely an IAM role, they work closely with it to enforce network‑level access policies based on identity. Ensuring that security policies (like security groups) adhere to the principle of least privilege.

4. Monitoring, Detection & Response: Using tools like cloud‑native Network Security Groups (NSG) Flow Logs or VPC Flow Logs to monitor network traffic. Analyzing logs with SIEM systems (like Splunk, Azure Sentinel, AWS Security Hub) to detect anomalous behavior. Investigating security incidents related to the network (e.g., DDoS attacks, unauthorized access attempts).

5. Automation & Compliance: Using Infrastructure as Code (IaC) tools like Terraform or CloudFormation to deploy and manage secure network configurations consistently. Writing scripts (in Python, PowerShell, etc.) to automate security checks and responses. Ensuring the cloud network complies with industry standards and regulations (e.g., PCI DSS, HIPAA, SOC 2).

Desired Experience & Qualification

Technical Skills (The Hard Skills)

• Deep networking fundamentals: expert in TCP/IP, DNS, BGP, OSI model, subnetting, and routing (non‑negotiable).
• Cloud platform proficiency: deep, hands‑on experience with at least one major cloud provider (AWS, Azure, or Google Cloud). Detailed knowledge of respective VPC/Virtual Network, DNS, load balancing, direct‑connect equivalents, and security services.
• Infrastructure as Code (IaC): proficiency in Terraform (highly recommended) or CloudFormation / Azure ARM templates.
• Security: strong understanding of cloud security best practices, firewalls, DDoS mitigation, and zero‑trust networking concepts.
• Automation & scripting: ability to use scripting languages (Python, PowerShell) to automate repetitive tasks and create custom solutions.
• Container networking: understanding networking in containerized environments like Kubernetes (services & ingress controllers).

Soft Skills

• Problem‑solving: ability to diagnose complex, distributed network issues under pressure.
• Communication: clearly explain technical concepts to non‑technical stakeholders and create detailed documentation.
• Collaboration: work closely with security teams, developers, and other infrastructure teams.

Typical Qualifications

• Education: Bachelor’s degree or diploma in computer studies or a related field.
• Experience: 3+ years in cloud network security or related role.

Certifications (Highly Valued)

• CCNA (Cisco Certified Network Associate).
• Cloud‑specific: AWS Certified Solutions Architect – Associate; AWS Certified Advanced Networking – Specialty.
• Microsoft Azure: Azure Administrator Associate; Azure Network Engineer Associate.

Interested?