Network Consultant Security

• We are seeking a Cloud Network Consultant -AWS to lead the design, implementation, governance, and security of enterprise-grade cloud networking solutions.
• This role requires deep technical expertise in Cisco routing, AWS networking and security services, Skyhigh Proxy, and automation with Terraform, combined with strong leadership to enforce robust security controls and drive strategic initiatives.
• You will apply your strong Cisco routing/switching and security skills as your base to own and oversee topics related to routing(Cisco), AWS network services (Firewall) to strategize AWS Firewall controls, optimize AWS CDN & AWS Front Door, secure web access by administer Squid and Skyhigh Secure Web Gateway/Proxy, manage allow/deny lists, and oversee operational lifecycle tasks such as TLS certificate renewals and AMI/image upgrades for network/security appliances.
• You will bring in ideas to codify everything possible with Terraform and drive resilient, observable, and compliant operations.
• You will also implement monitoring and alerting frameworks and enforce AWS Policy and Governance for compliance

• Define and own the cloud network architecture roadmap aligned with business objectives
• Establish network security governance, compliance frameworks, and enforce zero-trust principles
• Lead cloud networking strategy across hybrid environments, ensuring scalability, resilience, and cost optimization
• Act as a trusted advisor for network security best practices, risk assessments, and audit readiness

Technical Design & Implementation

• Architect and oversee Cisco routing (BGP, OSPF, MPLS, VPNs) for hybrid connectivity
• Collaborate with cloud architects, security, and DevOps teams to ensure secure and scalable network designs
• Design and implement AWS Firewall, AWS Front Door (with WAF), and AWS CDN for secure and optimized traffic delivery
• Design cloud and hybrid network topologies (hub-and-spoke/vWAN), IP addressing, UDRs/route tables, and peering aligned to zero-trust principles
• Design, implement, and support hybrid/cloud network architectures with Cisco routing (BGP, OSPF, route redistribution, ECMP, VRFs)
• Define egress/ingress patterns with AWS Firewall, NSGs, and route control; standardize segmentation and inspection points
• Build/Maintain AWS networking: VPCs, subnets, route tables, UDRs, NSGs/ASGs, Private Links, Load Balancers, and ExpressRoute/SD-WAN connectivity
• Architect AWS Front Door for global load balancing, path-based routing, health probes, origin groups, and custom domains
• Align AWS CDN caching strategies (TTL, rules engine, compression) to application patterns
• Design, deploy, and maintain AWS virtual networks (VPC), subnets, network security groups, and route tables
• Design and implement application delivery services (Traffic Manager, Load Balancer, etc.)
• Design and implement AWS Application Gateway (rewrite sets, TLS configuration, HTTP settings, etc.)
• Implement AWS Firewall, Application Gateway, Front Door, and Load Balancers for high availability and security
• Troubleshoot connectivity, routing, and latency issues across AWS, data centers, and hybrid networks
• Troubleshoot L3–L7 issues using packet captures, flow logs, WAF/Firewall/Front Door/CDN telemetry, and SIEM dashboards
• Manage DNS zones, Private Endpoints, and Network Peering in AWS
• Establish secure internet access patterns via Squid and Skyhigh Proxy (SWG), including SSL inspection, category policies, Client files, and exceptions
• Implement strategies for whitelisting/blacklisting domains, IPs, and applications
• Oversee certificate lifecycle management (issuance, renewal, rotation, automation)
• Govern AMI upgrades, patching cadence, and image hardening standards

Automation & Infrastructure as Code

• Drive Terraform adoption for network provisioning, policy-as-code, and compliance guardrails
• Implement CI/CD pipelines for network/security automation and drift detection
• Automate certificate renewals, AMI pipelines, and Squid/Skyhigh policy updates

Security Controls & Compliance

• Enforce network segmentation, least privilege access, and a deny-by-default posture
• Implement WAF/IDPS, threat intelligence filtering, and DDoS protection strategies
• Maintain runbooks, diagrams, inventories, and provide L3 support and knowledge transfer
• Ensure compliance with ISO 27001, SOC 2, GDPR, PCI-DSS, and maintain audit-ready documentation

Monitoring & Incident Response

• Define observability strategy and traffic analytics
• Lead troubleshooting for complex L3/L7 issues across data center, hybrid, and multi-cloud environments
• Establish incident response playbooks and conduct periodic tabletop exercises

• Exp: 8-12 years
• Mandatory Skills – Squid proxy, AWS front door, CDN, AWS Firewall and terraform (IaC), Cisco Routing and switching
• Secondary skills - Network security knowledge, WAF, Squid Proxy, FortiNet, CheckPoint.