Senior Cloud & Network Security Engineer

About the role

We are looking for a Senior Cloud & Network Security Engineer to lead the design, implementation and operation of secure network infrastructures across Microsoft Azure and on‑premises environments. The role blends high‑level architecture with hands‑on engineering, ensuring that connectivity, segmentation and protection meet enterprise standards.

Key responsibilities

• Design end‑to‑end network security architectures for Azure and hybrid environments, producing high‑level and low‑level designs, diagrams, IP plans and firewall rule matrices.
• Configure and manage Azure Virtual Networks, subnets, peering, route tables, Network Security Groups, Application Security Groups and hub‑and‑spoke or Virtual WAN topologies.
• Implement Azure Private Endpoints, Private Link and associated DNS configurations, as well as Azure DNS, Private DNS Zones and hybrid DNS resolution.
• Deploy and maintain site‑to‑site, point‑to‑site VPNs, Azure VPN Gateway and ExpressRoute connections.
• Operate Azure Firewall, network virtual appliances, NAT Gateway and Web Application Firewall, ensuring proper inspection and outbound control.
• Manage on‑premises firewalls, security policies, NAT rules, routing, VPN tunnels and logging, as well as enterprise proxies and secure web gateways.
• Investigate and resolve connectivity issues related to DNS, routing, asymmetric traffic, firewall policies, certificates and VPN tunnels.
• Monitor network availability, performance and security, and keep documentation up‑to‑date.

Required profile

• Minimum 10 years of experience in network security engineering, with a strong focus on Azure and hybrid environments.
• Proven ability to translate business and technical requirements into secure, scalable network designs.
• Experience working with solution architects, cybersecurity teams, infrastructure engineers and vendors throughout project delivery.

Required skills

• Azure Virtual Networks, subnets, peering, route tables, Network Security Groups, Application Security Groups.
• Azure Private Endpoints, Private Link and DNS (Azure DNS, Private DNS Zones, DNS Resolver).
• Azure VPN Gateway, site‑to‑site and point‑to‑site VPNs, ExpressRoute.
• Azure Firewall, NAT Gateway, Web Application Firewall, network virtual appliances.
• Hub‑and‑spoke and Azure Virtual WAN architectures.
• On‑premises firewalls (policy, NAT, routing, VPN) and enterprise proxies / secure web gateways.
• Network segmentation, routing, ingress/egress controls and firewall rule management.