About the Opportunity
We are seeking a highly skilled and experienced Cloud Network and Security Engineer to join our IT team at zag-zyklotron-ag. The Cloud Network and Security Engineer will be responsible for designing, implementing, and maintaining secure and scalable cloud network architectures.
Primary Duties and Responsibilities:
* Design and Implement Cloud Network Infrastructure: Design and implement scalable and resilient cloud network architectures across multiple cloud platforms (e.g., AWS, Azure) to support our business operations. Ensure high availability, performance, and reliability of cloud-based networks by implementing redundancy, load balancing, and fault-tolerant configurations. Collaborate with cross-functional teams to gather requirements and design network solutions that meet business needs.
* Network Security and Access Control: Implement and manage network security controls, including firewalls, intrusion detection and prevention systems, VPNs, and access control mechanisms. Develop and enforce network security policies and procedures to protect against external threats and unauthorized access. Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address potential risks and vulnerabilities.
* Identity and Access Management (IAM): Implement and manage IAM solutions to ensure proper user authentication, authorization, and access control in the cloud environment. Configure and enforce role-based access control (RBAC) policies and implement multi-factor authentication (MFA) for enhanced security. Monitor and audit user access privileges to ensure compliance with security policies and regulations.
* Security Monitoring and Incident Response: Establish and maintain security monitoring tools and systems to detect and respond to security incidents and anomalies. Develop incident response procedures and participate in security incident investigations, root cause analysis, and remediation efforts. Stay updated on emerging security threats, vulnerabilities, and industry best practices to proactively address potential risks.
* Cloud Compliance and Governance: Ensure compliance with relevant data protection and privacy regulations (e.g., GDPR, SOC2) and industry standards. Implement and maintain appropriate security controls, data encryption mechanisms, and data classification frameworks. Conduct regular audits and security assessments to ensure adherence to compliance requirements.
Minimum Skills and Qualifications:
* Relevant work experience and/or a Bachelor's degree in Computer Science, Information Systems, or a related field.
* Proven experience in designing and implementing cloud network architectures using platforms such as AWS and Azure.
* Strong knowledge of network protocols, TCP/IP, routing, switching, and load balancing technologies.
* Deep understanding of network security concepts, including firewall configuration, VPNs, intrusion detection/prevention, and access control.
* Familiarity with cloud-native security services and tools, such as AWS Security Hub, Azure Security Center.
* Experience with identity and access management (IAM) solutions, RBAC, and MFA.
* Knowledge of security frameworks, compliance requirements, and data protection regulations.
Preferred Skills and Qualifications:
* Relevant certifications (e.g., AWS Certified Security – Specialty, CCSP) are a plus.
* Palo Alto Prisma Access management, Firewall, and VPN experience would be a plus.
* Wiz experience would be a plus.
* Strong analytical and problem-solving skills, with the ability to troubleshoot complex network and security issues.
* Excellent communication and collaboration skills to work effectively with cross-functional teams and stakeholders.