Network / Infrastructure Security Specialist

Job Description: Network / Infrastructure Security Specialist Experience: 1015 Years Employment Type: Full-Time Job Summary We are looking for a Network / Infrastructure Security Specialist with 10–15 years of experience in enterprise network infrastructure, network security, and hybrid cloud environments (AWS & Azure). The ideal candidate should possess strong expertise in routing, switching, firewall technologies, cloud networking, and Infrastructure as Code (IaC), along with Python-based automation to streamline infrastructure operations and security. This role will be responsible for designing, implementing, securing, automating, and supporting enterprise network infrastructure across on-premises and cloud environments while ensuring high availability, scalability, and compliance with security best practices. Key Responsibilities Design, implement, and support enterprise network infrastructure across on-premises, AWS, and Azure environments. Configure and troubleshoot Layer 2/Layer 3 networks, routing, switching, VPNs, VPC, NSGs, WAF, Proxy and enterprise firewalls. Implement secure network architectures following Zero Trust principles, including segmentation, access control, and security hardening. Deploy and manage cloud networking services in AWS and Azure, ensuring secure hybrid connectivity. Develop Infrastructure as Code (IaC) solutions using Terraform, Ansible, CloudFormation, or Azure Bicep for automated infrastructure provisioning. Build Python automation scripts for network provisioning, configuration management, compliance validation, reporting, and operational tasks. Integrate automation into CI/CD pipelines to support infrastructure deployment and configuration management. Perform infrastructure hardening, vulnerability remediation, firewall policy reviews, and security assessments. Monitor network health, availability, and security events while supporting incident response and root cause analysis. Create and maintain technical documentation, network diagrams, standards, and operational procedures. Collaborate with infrastructure, cloud, DevOps, and cybersecurity teams to deliver secure and scalable solutions. Technical Skills Category Technical Skills / Technologies Enterprise Networking TCP/IP, LAN/WAN, VLAN, STP/RSTP/MSTP, MPLS, SD-WAN, QoS, DNS, DHCP Routing & Switching OSPF, BGP, EIGRP, Static Routing, VRF, Route Redistribution, HSRP, VRRP, LACP, EtherChannel, ACLs, NAT/PAT Network Security Palo Alto, Fortinet, Cisco Firepower/ASA, Check Point, Juniper SRX, IDS/IPS, VPN (IPSec/SSL), NAC, Zero Trust, Network Segmentation AWS Cloud VPC, Transit Gateway, Direct Connect, VPN, Route Tables, Security Groups, NACLs, WAF, Shield, IAM, GuardDuty, Security Hub, CloudTrail, AWS Config Microsoft Azure VNet, NSG, Azure Firewall, Application Gateway, ExpressRoute, VPN Gateway, Private Link, Defender for Cloud, Microsoft Sentinel, Entra ID, Azure Policy Infrastructure as Code (IaC) Terraform, Ansible, AWS CloudFormation, Azure Bicep, ARM Templates Automation & Scripting Python, PowerShell, Bash, REST APIs, JSON, YAML, Jinja2, Git DevOps / CI-CD Azure DevOps, GitHub Actions, GitLab CI/CD, Jenkins Monitoring & Logging SolarWinds, PRTG, Wireshark, Splunk, ELK Stack, Microsoft Sentinel, Grafana, Prometheus Vulnerability Management Qualys, Nessus, Tenable, Rapid7 InsightVM Operating Systems Windows Server, Linux (RHEL, Ubuntu), VMware ESXi Security & Compliance ISO 27001, NIST CSF, CIS Benchmarks, SOC 2, PCI DSS, Zero Trust Architecture Preferred Qualifications Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field. Experience working in enterprise or large-scale hybrid cloud environments. Knowledge of DevSecOps, CI/CD pipelines, and Infrastructure as Code practices. Familiarity with security frameworks such as ISO 27001, NIST CSF, CIS Benchmarks, and SOC 2. Preferred Certifications Cisco CCNP Enterprise / CCIE (Preferred), Palo Alto PCNSE or Fortinet NSE, Palo Alto PCNSE or Fortinet NSE, AWS Certified Security – Specialty or Solutions Architect , Microsoft Certified : Azure Network Engineer (AZ-700) or Azure Security Engineer (AZ-500), HashiCorp Terraform Associate, CISSP, CCSP, or CompTIA Security+