Network Security Engineer | Google Cloud Platform | Phoenix, Az

Job Title

Network Security Engineer

19640 N 31st Ave, Phoenix, AZ 85027, USA

Hybrid

Mid-Senior

Full-time

Information Technology (Software Development)

Senior Network Security Engineer with deep expertise in cloud networking, zero trust security, and hybrid/multi-cloud architectures. Proven ability to design, secure, and automate highly available cloud network environments while reducing risk and operational overhead. Recognized for strong analytical problem-solving, cross‑functional collaboration, and delivering secure‑by‑design solutions at scale.

• Design, implement, and secure AWS, Azure, and Google Cloud VPCs including subnet architecture, routing, NAT gateways, private endpoints, and cloud‑native controls.
• Implement and operate hybrid and multi‑cloud connectivity (VPN, Direct Connect, Express Route, Cloud Interconnect).
• Deploy and manage cloud firewalls, WAFs, DDoS protection, and Zero Trust access models to protect workloads, APIs, and users.
• Automate infrastructure and security controls using Infrastructure as Code (Terraform) and CI/CD pipelines (Git Hub Actions).
• Perform threat analysis, firewall policy design, and continuous monitoring of logs, flow logs, SIEM integration.
• Collaborate with cross‑functional teams to apply security best practices in design and implementation.

• Experience with service perimeters, security groups (AWS, GCP), VPC service controls, Kubernetes micro‑segmentation, cloud native network controls, Palo Alto firewalls.
• Strong knowledge of cloud native firewalling and networking principles.
• Familiarity with TCP/IP, BGP, routing, VPN technologies.
• Linux fundamentals and scripting for automation.
• Preferred certifications: CCNA, AWS Certified Dev Ops Engineer, GCP Professional Cloud Dev Ops Engineer.

• AWS, Azure, Google Cloud Platform
• VPC/VNet architecture, subnet design, routing, NAT gateways, private endpoints
• Hybrid/multi‑cloud connectivity (site‑to‑site VPN, cloud interconnects)
• Load balancing (L4/L7), traffic segmentation, high‑availability design
• Palo Alto Networks, Fortinet Forti Gate firewalls
• Firewall policy design, threat prevention, IPS/IDS, SSL/TLS inspection
• Zero Trust networking, least‑privilege access, network segmentation
• Web and application protection (WAF, DDoS mitigation)
• Infrastructure as Code:
  Terraform
• Git Hub, Git Hub Actions for CI/CD automation
• Logging and monitoring fundamentals (firewall logs, flow logs, SIEM integration)
• Linux fundamentals and scripting

• Core networking fundamentals: TCP/IP, BGP, routing, VPN technologies
• Identity & access integration with network security controls
• Logging and monitoring fundamentals (firewall logs, flow logs, SIEM integration)
• Linux fundamentals and scripting for automation