Cloud Network Security Architect / Engineer – 100% Remote

Cloud Network Security Architect / Engineer – 100% Remote
Candidate Location – Brazil
12 Months plus contract
Rate - DOE
Start date – immediately
We are seeking an experienced Cloud Network Security Architect / Engineer to design, implement, and secure enterprise AWS cloud network environments.
The ideal candidate will have strong hands-on experience with cloud network security, next-generation firewalls, AWS Gateway Load Balancer, Zero Trust architecture, traffic inspection, ingress/egress controls, and network security automation.
Key Responsibilities
Design and implement secure AWS cloud network security architectures.
Develop security solutions using Palo Alto Networks and/or FortiGate firewalls.
Design and implement AWS Gateway Load Balancer (GWLB) architectures for centralized traffic inspection.
Design secure ingress and egress traffic flows across AWS environments.
Implement network segmentation based on Zero Trust security principles.
Design and enforce security controls for north-south and east-west traffic.
Develop secure VPC, subnet, routing, firewall, and inspection architectures.
Implement threat inspection and traffic filtering across cloud environments.
Integrate cloud network security controls with enterprise security architecture.
Design highly available and resilient security infrastructure.
Automate security and network configuration using Terraform, Python, Ansible, or similar technologies.
Collaborate with cloud, network, cybersecurity, DevOps, and application teams.
Troubleshoot complex network security, routing, and connectivity issues.
Develop security architecture documentation, diagrams, standards, and operational procedures.
Support security assessments, vulnerability remediation, and compliance requirements.
Required Skills
Strong experience with AWS cloud networking and security.
Hands-on experience with Palo Alto Networks and/or FortiGate firewalls.
Strong knowledge of AWS Gateway Load Balancer (GWLB).
Experience designing Zero Trust network security and segmentation.
Strong understanding of ingress/egress traffic controls and security inspection.
Knowledge of AWS VPC, Transit Gateway, routing, Security Groups, NACLs, and load balancing.
Strong understanding of TCP/IP, DNS, routing, VPN, and network security concepts.
Experience with Infrastructure-as-Code and automation.
Strong troubleshooting and analytical skills.
Ability to develop enterprise-level security architecture and technical documentation.

Work arrangement
No