Cloud Network security Engineers

Comprehensive understanding of BGP: Configure and troubleshoot in large global environments.

Comprehensive understanding of routing concepts: Inter-VR routing, policy-based routing, routing protocols, route filtering, path selection, access-lists etc.

Comprehensive understanding of switching concepts: VLANs, Layer 2, Mac-forwarding, vlan trunking, VRRP, Gratuitous ARP.

Comprehensive understanding of firewall/security concepts: L2-L7, all versions of NAT, failover scenarios, zonal concepts, IPSec, L7 encryption concepts, URL filtering, DNS, security profiles and rules, proxying.

Comprehensive understanding of Load Balancing concepts: Cloud LB and conventional LB and their differences in functionality.

Good understanding of Public Cloud platforms: Preferably GCP; specifically Networking, Firewalling, IAM and how they relate to Cloud Native services (PSA, Cloud SQL, GCVE, Cloud Interconnects, BMS, FileStore, Netapp, etc).

Good understanding of Infrastructure as Code (IAC) to provision resources: Must be able to customize and optimize the codebase to simplify deliveries.

Good understanding of Linux administration: Using Linux to bridge technical gaps in Windows and understanding the tools available to troubleshoot network connectivity.

Understanding of APIs: in order to expedite data collection and configuration to eliminate human error.

Understanding of DevOps: how it can improve delivery and operation

Products

• Juniper: MX, SRX, QFX
• Palo Alto: Physical and virtual firewalls, Panorama.
• Google Cloud Platform
• Squid Proxy

Tools

• Terraform
• Algosec or similar tool for traffic flow governance.
• Ansible
• M2VM (GCP migration tool)
• Azure DevOps pipelines
• Azure DevOps GIT

Mandatory languages

• Python
• HCL (HashiCorp Configuration Language)
• YAML
• JSON