Cloud Security Engineer

Cloud Network Security Engineering Role

The Cloud Security Network Engineer job description is focused on architecting and implementing GCP cloud NGFW, FortiGate, and FWaaS infrastructure. Responsibilities include designing, deploying, and managing FortiGate-VM and cloud-native firewalls in Google Cloud.

Key duties involve creating secure network architectures, automating security controls, and ensuring compliance across the firewall / segmentation tool deployments. This role requires expertise in GCP networking, Fortinet products, infrastructure-as-code tools, associated protocols and hybrid cloud integration strategies.

Key responsibilities

• Design and architecture: Architect and design secure cloud network infrastructure on GCP, including the segmentation of virtual networks to protect applications and data.
• Implementation and deployment: Implement and deploy appropriate firewall tooling. May include FortiGate-VM instances, cloud-native firewalls as a service (FWaaS) within GCP environments.
• Automation: Develop and implement automated security solutions using infrastructure-as-code tools (like Terraform) and CI/CD pipelines for consistent and repeatable deployments.
• Configuration and management: Configure and manage FortiGate firewall policies, routing, VPNs, and other security features, ensuring consistent policy management across hybrid environments.
• Threat mitigation: Leverage FortiGuard threat intelligence and or GCP offerings to protect against known and unknown threats, including malware, botnets, and zero-day attacks.
• Monitoring and incident response: Monitor cloud environments for security risks, analyze logs, and respond to security incidents.
• Compliance and auditing: Ensure continuous compliance with industry standards and regulations and perform security audits and vulnerability assessments.
• Collaboration: Serve as a subject matter expert for internal and external stakeholders, providing technical guidance on security best practices.

Required skills and experience

• Strong knowledge of Google Cloud Platform (GCP) networking and security services.
• Hands-on experience with Fortinet products, including FortiGate-VM and FortiGate-CNF.
• Proficiency with infrastructure-as-code tools such as Terraform or Ansible.
• Experience with network security concepts and protocols (e.g., TCP/IP, DNS, BGP, OSPF, VPNs).
• Experience with DevOps and Agile methodologies and CI/CD pipelines.
• Understanding of containerization technologies like Kubernetes and their security implications is a plus.
• Scripting experience (e.g., Python) is often required or preferred.
• Strong understanding of cloud-native security principles and a "security-first" mindset.