Cybersecurity Engineer for Edge Defense (Cloud)

Cybersecurity Engineer for Cloud & Edge Defense

As a Cybersecurity Engineer for Cloud & Edge Defense, you will be the primary architect and engineer responsible for the security of global digital boundaries and multi-cloud ecosystems. You will design and implement high-performance traffic inspection solutions across AWS, GCP, and Azure using Palo Alto VM-Series as the central pillar. This role bridges the gap between traditional network security and cloud-native architectures, leveraging Terraform and Python to deploy security as code to ensure global cloud expansion remains resilient and compliant.

Responsibilities

• Design and develop robust cloud network infrastructure across AWS, GCP, and Azure.
• Create detailed cloud network diagrams, design documents, and implementation plans.
• Partner with network and cloud architects to integrate firewall solutions into the global network fabric.
• Execute advanced configuration and management of Palo Alto solutions (VM-Series, Panorama).
• Configure, program, and deploy security solutions via automated pipelines.
• Implement and manage App-ID, User-ID, WildFire, Threat Prevention, SSL Decryption, and GlobalProtect to enforce a Zero Trust posture.
• Troubleshoot complex network and security issues related to cloud-native routing, load balancing, and firewall inspection.
• Manage security policies as code while improving automation workflows and orchestration.
• Stay current with emerging threats and cloud-specific vulnerabilities to refine defense-in-depth strategies.

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Information Security, or a related technical field.
• 3+ years of experience in designing, deploying, and supporting Next-Generation Firewalls (NGFW) with a strong networking background.
• Proven track record of implementing network security controls in at least two major cloud providers (AWS, Azure, or GCP).
• Expert-level knowledge of Palo Alto platforms, including advanced threat prevention, TLS inspection, and high-availability design.
• Proven experience using Ansible, Terraform, or Python to manage network security infrastructure at scale.
• Deep understanding of core protocols (BGP, OSPF, DNS, TLS/SSL).
• Experience managing security controls in complex, global environments.
• Strong communication skills with the ability to explain complex security concepts to non-technical stakeholders.
• Ability to navigate global complexity and drive clarity in high-level security requirements.