Cloud Security Engineer

Role & responsibilities

• Design and maintain secure Azure cloud network infrastructure using VNets, NSGs and network segmentation.
• Configure and troubleshoot IPSec Site-to-Site VPNs, Azure VPN Gateway and hybrid-cloud connectivity.
• Administer and tune WAF solutions across Azure WAF, Azure Front Door, Cloudflare and Akamai.
• Implement WAF rules to mitigate OWASP Top 10 vulnerabilities, web attacks and API security threats.
• Manage Layer 7 DDoS protection, bot mitigation, rate limiting, IP reputation and false-positive tuning.
• Administer Zscaler ZIA/ZPA policies, ZTNA, URL filtering, SSL inspection, CASB and DLP.
• Manage Zscaler Client Connector, PAC files, App Connectors and traffic-forwarding profiles.
• Configure and maintain FortiGate firewalls, security policies, NAT, IPS, Application Control and VPNs.
• Perform firewall upgrades, security policy reviews, maintenance and troubleshooting.
• Manage incidents, service requests and change records through ServiceNow, following ITIL processes.
• Prepare RFCs, support CAB reviews and maintain security SOPs, configuration records and technical documentation.
• Collaborate with IT and infrastructure teams to resolve security issues and strengthen overall security posture.

Preferred candidate profile

• Bachelors or Master’s degree in Computer Science, MCA, Information Technology or a related discipline.
• Strong hands-on knowledge of Azure networking and security, including VNets, NSGs, Azure WAF, Azure Front Door and Azure VPN Gateway.
• Experience with WAF technologies such as Azure WAF, Cloudflare WAF and Akamai WAF.
• Working knowledge of Zscaler ZIA/ZPA; familiarity with ZDX, ZCC, PAC files, CASB and DLP is desirable.
• Hands-on experience with FortiGate NGFW, including security policies, NAT, IPS, Application Control, IPSec VPN and SSL VPN.
• Understanding of OWASP Top 10, WAF rule tuning, traffic analysis, false-positive investigation and application-layer security.
• Practical knowledge of ServiceNow and ITIL incident, service request and change management processes.
• Strong troubleshooting, analytical, documentation and stakeholder communication skills.