Network Security Engineer

TEKsystems•Phoenix, AZ

3d•$60 - $65•Hybrid

About The Position

Senior Network Security Engineer with deep expertise in cloud networking, zero trust security, and hybrid/multi-cloud architectures. Proven ability to design, secure, and automate highly available cloud network environments while reducing risk and operational overhead. Recognized for strong analytical problem-solving, cross-functional collaboration, and delivering secure-by-design solutions at scale. Demonstrated proficiency in cloud-native networking and security controls across AWS, Azure, and GCP, including segmentation, identity-aware access, and traffic inspection. Extensive hands-on experience designing and securing AWS VPCs, Azure Virtual Networks, and GCP VPCs, including subnet architecture, routing, NAT gateways, private endpoints, and security enforcement using cloud-native controls. Implemented and operated AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect to support secure hybrid and multi-cloud connectivity. Specialized in deploying cloud firewalls, WAFs, DDoS protection, and Zero Trust access models to protect workloads, APIs, and users.

Requirements

Cloud Platforms & Networking • AWS, Microsoft Azure, Google Cloud Platform (GCP) • VPC/VNet architecture, subnet design, routing, NAT gateways, private endpoints • Hybrid and multi-cloud connectivity (site-to-site VPN, cloud interconnects) • Load balancing (L4/L7), traffic segmentation, high availability design
Network & Cloud Security • Palo Alto Networks, Fortinet FortiGate firewalls • Firewall policy design, threat prevention, IPS/IDS, SSL/TLS inspection • Zero Trust networking, least-privilege access, network segmentation • Web and application protection concepts (WAF, DDoS mitigation)
Infrastructure as Code & DevSecOps • Terraform for multi-cloud infrastructure and security controls • GitHub for source control and collaboration • GitHub Actions for CI/CD automation, security checks, and policy enforcement
Core networking fundamentals: TCP/IP, BGP, routing, VPN technologies
Identity and access integration with network security controls
Logging and monitoring fundamentals (firewall logs, flow logs, SIEM integration)
Linux fundamentals and scripting for automation support
Great written and communication skills