Network Security Lead – Cloud Infrastructure

Own the end-to-end architecture, design, deployment, and 24/7 operational management of secure network and security infrastructure across cloud (Azure, GCP, OCI) and on-premises environments — spanning routing, switching, and cybersecurity engineering. Act as the technical authority responsible for designing highly available, resilient architectures; leading deployment and configuration of new environments; and operating the infrastructure around the clock to ensure it remains stable, secure, and audit-ready. Skilled in preparing operational reports and presentations, running operational meetings, handling escalations, and managing major changes — while retaining hands-on accountability for daily operations.

Responsibilities

• Design secure reference architectures for hub-spoke topologies, VNet/VPC/VCN environments, subnetting, IP/CIDR planning, and static/BGP dynamic routing across Azure, GCP, and OCI, as well as on-prem routing and switching infrastructure.
• Architect secure connectivity patterns — VPN, peering, and dedicated interconnects (ExpressRoute, Interconnect, FastConnect) — and lead network security design reviews with actionable, best-practice recommendations.
• Lead deployment and configuration of network security environments: Site-to-Site VPNs with redundant tunnels and BGP routing, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next-gen firewalls, and Internet/NAT/Service Gateways for new builds and migrations.
• Design, deploy, and operate infrastructure to meet 24/7 availability targets, including redundancy, failover, load balancing, and disaster recovery across hybrid and multi-cloud environments.
• Own round-the-clock operational management of the network and security environment: change management, patching/upgrades of NVAs, vulnerability tracking and remediation, and coordination of patch windows and incident response.
• Manage and oversee day-to-day network and security operations across routing, switching, and cybersecurity engineering, keeping leadership informed of status, risks, and escalations.
• Configure and maintain monitoring, logging, and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs) to proactively detect and resolve availability, performance, and security issues.
• Harden network device and cloud configurations against industry benchmarks (e.g., CIS, NIST) and internal security baselines; remediate findings from internal/external audits.
• Prepare and present operational reports, dashboards, and presentations summarizing network/security performance, availability, incidents, and risk posture to leadership and stakeholders.
• Plan and run operational meetings — daily/weekly stand-ups, service reviews, and incident review sessions — driving action items to closure.
• Act as the senior escalation point for critical operational and security issues across all managed platforms, ensuring timely resolution and clear communication.
• Own and handle major changes end-to-end — planning, risk assessment, change advisory board (CAB) submissions, implementation, and post-change validation — with minimal impact to 24/7 availability.
• Design, deploy, and validate backup and restore procedures for NVAs, firewall policies, and network configuration state; own disaster recovery and cross-region DR networking design.
• Coordinate cross-functional activities with cloud, security, application, and operations teams to ensure consistent security posture and always-on availability across the environment.
• Maintain accurate architecture documentation, network diagrams, runbooks, and operational procedures; ensure changes follow proper governance, risk, and change-control processes.
• Mentor engineers and act as a point of technical escalation for complex operational or security issues.
• Participate in an on-call rotation and respond to critical incidents outside business hours to maintain 24/7 availability; travel to datacenter or client sites as needed.

Qualifications

• 10–12 years of experience in cloud infrastructure, network operations, and cybersecurity engineering, including hands-on ownership of designing, deploying, and operating secure network infrastructure.
• Demonstrable depth across at least two of Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (all three strongly preferred).
• Proven experience designing and operating infrastructure to meet 24/7 availability, redundancy, and disaster recovery requirements.
• Demonstrated experience overseeing or coordinating multi-disciplinary operations (network + security) and reporting outcomes to leadership.
• Strong skills in preparing operational reports, dashboards, and presentations for leadership and stakeholder audiences.
• Proven track record running operational meetings and driving structured escalation handling to resolution.
• Hands-on experience managing major changes, including change planning, risk assessment, CAB processes, and post-implementation review.
• Hands-on expertise with enterprise routers, switches, firewalls, NVAs, and cloud-native network security monitoring tools.
• Experience hardening network and cloud infrastructure against security frameworks and remediating audit findings.
• Strong troubleshooting and incident-response experience across routing, switching, cloud networking, and security domains.
• Excellent coordination and communication skills, with the ability to work closely with leadership and cross-functional stakeholders.
• Willing and able to participate in an on-call rotation and travel to datacenter/client sites as needed to maintain 24/7 availability.

Required Certifications

• Cisco CCNP (Enterprise / Security) or equivalent vendor-neutral routing & switching certification.
• Microsoft Certified: Azure Network Security Engineer Associate (or Azure Solutions Architect Expert).
• Google Professional Cloud Network Engineer / Cloud Security Engineer.
• Oracle Cloud Infrastructure (OCI) Network Security Professional or Architect Professional.
• CISSP (Certified Information Systems Security Professional) or working toward certification.
• Firewall/NGFW vendor certification (e.g., Palo Alto PCNSA/PCNSE, Fortinet NSE, or Check Point CCSA/CCSE).

Preferred: CCIE, CISM, CEH. At least two of Azure, GCP, and OCI required; all three strongly preferred. Certifications must be current; equivalent recognized credentials considered subject to approval.