Network Security Lead – Cloud Infrastructure

About the role

Lead the end‑to‑end design, deployment and 24/7 operation of secure network and security infrastructure across multi‑cloud (Azure, GCP, OCI) and on‑premises environments. Act as the technical authority ensuring high availability, resilience and audit‑ready compliance.

Key responsibilities

• Design secure reference architectures for hub‑spoke topologies, subnetting, IP planning and routing (static/BGP) across Azure, GCP, OCI and on‑premises.
• Architect connectivity patterns – VPN, peering, ExpressRoute, Interconnect, FastConnect – and lead security design reviews.
• Deploy and configure network security components: site‑to‑site VPNs, VPC/VCN peering, NSGs, security lists/ACLs, NVAs, next‑gen firewalls, gateways.
• Own 24/7 operational management, including change management, patching, vulnerability remediation and incident response.
• Configure monitoring, logging and diagnostics (Azure Monitor, GCP Cloud Monitoring, OCI Monitoring) and harden configurations to CIS/NIST benchmarks.
• Prepare and present operational reports, dashboards and run operational meetings for leadership.
• Mentor engineers, act as senior escalation point and participate in on‑call rotation.

Required profile

• 10–12 years of experience in cloud infrastructure, network operations and cybersecurity engineering.
• Hands‑on ownership of designing, deploying and operating secure network infrastructure in at least two of Azure, GCP and OCI.
• Proven ability to deliver 24/7 availability, redundancy and disaster‑recovery solutions.
• Experience leading multi‑disciplinary operations, reporting to leadership and managing major changes.
• Willingness to participate in on‑call rotation and travel to datacenters or client sites.

Required skills

• Azure, Google Cloud Platform, Oracle Cloud Infrastructure networking.
• Routing and switching (static/BGP), VPN, peering, ExpressRoute, Interconnect, FastConnect.
• Network security devices: NSGs, security lists/ACLs, NVAs, next‑gen firewalls.
• Monitoring tools: Azure Monitor, GCP Cloud Monitoring, OCI Monitoring, flow logs.
• Certifications: Cisco CCNP (Enterprise/Security) or equivalent, Microsoft Azure Network Security Engineer Associate, Google Professional Cloud Network Engineer, OCI Network Security Professional, CISSP, firewall vendor certifications (Palo Alto, Fortinet, Check Point). Preferred: CCIE, CISM, CEH.