Sr. Network Engineer and Security.

Job Description

Job Title Senior Cloud Network & Security Engineer GCP / Palo Alto

Location: Hyderabad
Department: IT (On-Prem)and Cloud Infra Managed Services Delivery

Experience: 10+ Years

Job Summary

We are looking for a Senior Cloud Network & Security Engineer with 10+ years of overall experience in network engineering, cloud networking, and security. The candidate should have strong hands-on experience with GCP networking, GKE networking, Palo Alto Networks firewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybrid connectivity.

The role will be responsible for designing, implementing, securing, troubleshooting, and maintaining highly available cloud network infrastructure and security solutions.

Key Responsibilities

GCP & GKE Networking

• Design, implement, and manage GCP network infrastructure, including VPC, Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPC Peering, Private Service Connect, and Load Balancing.
• Strong hands-on experience with GKE networking, including VPC-native clusters, Pod/Service networking, Alias IPs, Network Policies, Ingress, DNS, firewall rules, Private GKE, and GKE connectivity.
• Troubleshoot GCP/GKE connectivity, routing, DNS, ingress/egress, and performance issues.
• Design secure connectivity between GCP, GKE, on-premises, and other cloud environments.

Palo Alto Networks

• Design, deploy, configure, and manage Palo Alto VM-Series firewalls on GCP.
• Manage firewall policies, NAT, routing, security zones, application controls, threat prevention, URL filtering, and logging.
• Design and manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover.
• Configure and troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN.
• Manage Palo Alto PAN-OS upgrades/updates, licensing, subscriptions, configuration backup/restore, and license-related issues.
• Perform firewall rule optimization, troubleshooting, and security monitoring.

Cloudflare & Cloud Gateway

• Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, and traffic management.
• Design and manage secure cloud gateway / internet gateway architectures, including ingress/egress traffic, NAT, routing, and centralized security inspection.
• Integrate Cloudflare, Palo Alto, GCP Load Balancing, and application environments.

Cloud Security

• Implement network security, segmentation, IAM, Zero Trust, encryption, firewall controls, and secure ingress/egress.
• Collaborate with Security and DevSecOps teams to implement security best practices and controls.
• Support security incidents, root-cause analysis, and remediation activities.

Automation & Operations

• Automate infrastructure using Terraform, Ansible, and GitOps practices.
• Develop automation/scripts using Python, Bash, or PowerShell.
• Use Datadog and GCP/Palo Alto monitoring and logging for performance monitoring and troubleshooting.
• Maintain architecture diagrams, configuration standards, and operational documentation.
• Provide technical guidance and collaborate with Cloud, DevOps, Security, and Development teams.

Required Skills & Experience

• 10+ years of overall experience in Network Engineering, Cloud Networking, Infrastructure, or Cloud Security.
• 5+ years of hands-on GCP networking experience.
• Strong hands-on experience with GKE networking, architecture, operations, and troubleshooting.
• Strong experience with Palo Alto Networks firewalls, preferably VM-Series on GCP.
• Experience with Palo Alto Primary/Secondary or Active-Passive HA.
• Strong experience with Palo Alto firewall policies, NAT, routing, security zones, and security profiles.
• Hands-on experience with IPsec VPN and GlobalProtect.
• Experience with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and troubleshooting.
• Hands-on experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.
• Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.
• Experience with Terraform/IaC, Ansible, GitOps, and CI/CD.
• Scripting experience in Python, Bash, or PowerShell.
• Experience with Datadog and cloud monitoring/logging.
• Strong understanding of cloud security, network segmentation, IAM, Zero Trust, and DevSecOps.
• Experience with *hybrid cloud and on-premises connectivity…