Network Security Lead - Cloud Infrastructure

Position Overview

As the Network Security Lead for Cloud Infrastructure, you will take charge of the complete lifecycle involving architecture, design, deployment, and continuous 24/7 operational management of secure network and security frameworks across multiple cloud platforms (Azure, Google Cloud Platform, Oracle Cloud Infrastructure) and on-premises setups. This role encompasses routing, switching, and cybersecurity engineering disciplines, requiring you to act as the technical lead responsible for creating highly available, resilient network architectures, steering new environment deployments, and maintaining stable, secure, and compliant infrastructures around the clock.

Core Responsibilities

• Design secure reference architectures including hub-spoke topologies, VNet/VPC/VCN environments, subnetting schemes, IP/CIDR management, and routing (static and BGP dynamic) across cloud providers and on-premises network equipment.
• Develop secure connectivity patterns such as VPN tunnels, peering, and dedicated interconnects (including ExpressRoute, Interconnect, FastConnect) and lead network security design assessments with actionable, best-practice guidance.
• Lead hands-on deployment and setup of network security environments featuring Site-to-Site VPNs with redundancy, BGP routing, peering configurations, network security groups, access control lists, next-gen firewalls, NVAs, and gateway services for new implementations and cloud migrations.
• Design and maintain infrastructure supporting 24/7 availability targets, including load balancing, failover, redundancy, and disaster recovery architectures tailored to hybrid and multi-cloud platforms.
• Manage the network and security environment's day-to-day operations, covering change management, patching/upgrades for NVAs, vulnerability monitoring and remediation, patch window scheduling, and incident response coordination.
• Supervise regular network and security operations, providing leadership visibility around system status, risk factors, and escalation handling.
• Configure and maintain comprehensive monitoring and logging solutions such as Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, and flow logs to proactively track availability, performance, and security.
• Implement and enforce hardened network device and cloud configurations aligned with industry standards (CIS, NIST) and internal security baselines; address and resolve audit findings.
• Generate and present operational reports, dashboards, and executive presentations summarizing performance, security events, and risk to stakeholders.
• Organize and lead operational meetings—daily stand-ups, weekly service reviews, and incident analyses—to ensure prompt follow-through on action items.
• Serve as the senior escalation point for critical operational or security incidents, ensuring swift resolution and communication.
• Plan and execute major change operations end-to-end, including risk assessments, CAB submissions, implementation and verification with minimal service impact.
• Design and validate backup and restoration processes for NVAs, firewall policies, and network configurations, while owning disaster recovery and cross-region networking strategies.
• Coordinate activities across cloud, security, application, and operations teams to maintain consistent security postures and high availability.
• Maintain precise and current documentation including network diagrams, runbooks, architecture documents, and standard operating procedures with strong adherence to governance and change control.
• Mentor and guide engineering staff and act as a technical escalation resource for complex operational or security challenges.
• Participate in an on-call schedule to respond to critical incidents beyond regular hours and undertake travel to datacenter or client sites as necessary to uphold 24/7 service availability.

Required Certifications

• Cisco CCNP (Enterprise or Security track) or equivalent certifications in routing and switching.
• Microsoft Certified: Azure Network Security Engineer Associate or Azure Solutions Architect Expert.
• Google Professional Cloud Network Engineer or Cloud Security Engineer certification.
• Oracle Cloud Infrastructure Network Security Professional or Architect credentials.
• CISSP or actively pursuing the certification.
• Vendor-specific firewall or NGFW certifications such as Palo Alto PCNSA/PCNSE, Fortinet NSE, or Check Point CCSA/CCSE.

Preferred certifications: CCIE, CISM, CEH. Candidates are expected to be certified in at least two of the following cloud platforms: Azure, GCP, OCI; certifications must be current or subject to approval if equivalent.

Experience Requirements

• Between ten and twelve years of professional experience encompassing cloud infrastructure, network operations, and cybersecurity engineering with a proven track record of end-to-end design, deployment, and operational management of secure network infrastructure.
• Substantial expertise spanning at least two cloud providers: Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure (experience with all three is highly desirable).
• Demonstrated ability in designing and maintaining infrastructure supporting 24/7 uptime, redundancy, and disaster recovery capabilities.
• Experience managing or overseeing multi-disciplinary network and security operations with responsibilities for leadership communication.
• Skillful at preparing detailed operational reports, as well as leadership-focused dashboards and presentations.
• Competence in conducting operational meetings and driving structured escalation workflow to timely resolution.
• Strong background in managing critical changes including planning, risk assessments, change advisory board procedures, and post-implementation reviews.
• Expertise operating enterprise-grade routers, switches, firewalls, NVAs, and native cloud network security tools.
• Experience executing network and cloud infrastructure hardening per security standards and resolving audit recommendations.
• Proven track record in troubleshooting and incident management across routing, switching, cloud networking, and security systems.
• Excellent communication and coordination abilities with leadership and interdepartmental teams.
• Willingness to join an on-call rotation and travel as needed to maintain continuous infrastructure availability.