Cloud Network Security Engineer

About Cloud4C:

• Cloud4C is the fastest growing Cloud Infrastructure and Managed Services Provider supporting mission critical workloads of 3500+ enterprises including 60+ of the Global Fortune 500 companies.
• Cloud4C is a niche and only managed services provider with Single SLA up to Application layer leveraging 18 Centers of Excellence. It specializes in Multi-Cloud/Hybrid-Cloud requirements, addressing the complex needs of large enterprises across Hyper-scale Public Cloud Platforms – Azure, GCP, AWS & Alibaba to Private Cloud environments.
• The company offers an integrated cloud security services through 26 security tools and 40+ security controls to ensure data is protected and backed by industry compliances – PCIDSS, GxP, HIPPA, IRAP, MAS etc.
• We are currently present in 25 countries across ASIA (India, Sri Lanka, Japan, Singapore, Australia, New Zealand, Thailand, Malaysia, Indonesia, Philippines, South Korea, Vietnam and Hong Kong) EMEA (Netherlands, Switzerland, UK, Portugal, Saudi Arabia, UAE, Qatar and Bahrain) AMERICA (USA, Canada, Mexico and Colombia)
• We work with the leading technology companies in providing the community clouds like HANA Enterprise Cloud along with SAP, Banking Community Cloud along with Fidelity, G-Cloud along with Infosys to name a few.

Role Summary

We are looking for a skilled Cloud Network & Security Engineer to support, troubleshoot, and optimize enterprise network and security infrastructure across on-prem and cloud environments. The role requires strong hands-on expertise in networking fundamentals, firewall management, and cloud-native security practices.

Key Responsibilities

• Provide L2 support for network and security incidents, service requests, and changes
• Troubleshoot complex network issues involving routing, VPNs, and application connectivity
• Configure and manage firewalls, VPNs, and load balancing solutions
• Monitor and analyze traffic flows, logs, and alerts across hybrid environments
• Perform root cause analysis (RCA) for security incidents and network outages
• Collaborate with L3 teams for escalations and architectural improvements
• Ensure adherence to security policies, compliance standards, and best practices

Core Network Skills

• Strong understanding of TCP/IP, subnetting, and routing (static & dynamic)
• Experience with VPN technologies (IPSec, SSL VPN, site-to-site, client VPN)
• Knowledge of load balancing concepts (Layer 4 / Layer 7)
• Hands-on experience with DNS, NAT, DHCP
• Packet-level troubleshooting using tools like tcpdump and Wireshark

Firewall Expertise

• Hands-on experience with:
• Palo Alto Networks
• Fortinet
• Policy creation, rule optimization, NAT configuration, and log analysis

Cloud Networking & Security (At least one required)

• Experience in AWS / Azure / GCP / OCI
• VPC/VNet design and subnet segmentation
• Route tables, Internet Gateway, NAT Gateway configuration
• Private endpoints and service endpoints
• VPC/VNet peering and transit hub architectures
• Hybrid connectivity (VPN, Direct Connect, ExpressRoute)

Cloud Security & Monitoring

• Experience with flow logs (VPC Flow Logs, NSG Flow Logs)
• Exposure to cloud-native SIEM tools (e.g., Sentinel, Security Hub)
• IDS/IPS integration and traffic monitoring
• Traffic mirroring and packet capture in cloud environments
• Log correlation across cloud, firewall, and endpoints
• Understanding of attack patterns and threat detection

Identity & Access Management

• IAM policies and RBAC models
• Integration with Active Directory / Azure AD
• MFA and conditional access policies
• Understanding of Zero Trust Network Access (ZTNA)

Architecture & Design Awareness

• Multi-region architecture concepts
• High availability and fault tolerance design
• Hub-and-spoke / landing zone architecture models
• Web Application Firewall (WAF) concepts

Required Experience

• 3–7 years of experience in network and security engineering
• Experience in enterprise or cloud-based environments
• Strong troubleshooting and analytical skills

Good to Have

• Relevant certifications (e.g., CCNA/CCNP, PCNSE, NSE, Azure/AWS certifications)
• Scripting or automation exposure (Python, Bash, Terraform)