Senior Cloud Network Security Architect

About the role

We are seeking a skilled Senior Cloud Network Security Architect to own end‑to‑end design, deployment and operational management of secure network infrastructure across Microsoft Azure, Google Cloud Platform and Oracle Cloud Infrastructure. You will work closely with cloud, security, application and operations teams to ensure our clients’ multi‑cloud environments are connected, protected and highly available.

Key responsibilities

• Define secure reference architectures for VNet/VPC/VCN environments, including hub‑spoke topologies, subnetting, IP/CIDR planning and routing (static, BGP, policy‑based).
• Architect and implement secure connectivity patterns such as IPSec/IKEv2 site‑to‑site VPNs, Azure ExpressRoute, GCP Interconnect and OCI FastConnect, including redundant tunnels and dynamic routing.
• Deploy and configure network security components: NSGs, security lists, network ACLs, Internet/NAT/Service Gateways, Cloud Armor WAF, Cloud CDN, and Network Virtual Appliances.
• Lead design reviews, provide actionable recommendations and ensure alignment with industry best practices.
• Own day‑to‑day operations: change management, patching and upgrades of NVAs, vulnerability tracking and remediation, incident response, and performance monitoring.
• Produce monthly operational reports on policy changes, patches and incidents, acting as senior escalation point.

Required profile

• Extensive experience designing and operating secure network architectures in Azure, GCP and OCI.
• Strong architectural judgment with ability to translate connectivity and security requirements into scalable, operationally sustainable designs.
• Proven track record leading multi‑cloud deployments, network security reviews and incident response.
• Excellent communication skills to collaborate with cloud, security, application and operations teams.

Required skills

• Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure
• IPSec/IKEv2 VPN, BGP, Azure ExpressRoute, GCP Interconnect, OCI FastConnect
• VNet, VPC, VCN design, hub‑spoke topology, IP/CIDR planning, route tables
• Network Security Groups (NSG), Network Security ACLs, security lists
• Cloud Armor WAF, Cloud CDN
• Network Virtual Appliances (NVA), patch management, vulnerability remediation