Senior Cloud Network & Security Engineer – GCP / Palo Alto

Job Title

Senior Cloud Network & Security Engineer – GCP / Palo

Alto

• Location: Hyderabad
• Department: IT (On-Prem)and Cloud Infra Managed Services Delivery
• Experience: 10+ Years

Job Summary

• We are looking for a Senior Cloud Network & Security
• Engineer with 10+ years of overall experience in network
• engineering, cloud networking, and security. The candidate should have strong
• hands-on experience with GCP networking, GKE networking, Palo Alto Networks
• firewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybrid
• connectivity.
• The role will be responsible for designing, implementing,
• securing, troubleshooting, and maintaining highly available cloud network
• infrastructure and security solutions.

Key Responsibilities

GCP & GKE Networking

• Design,
• implement, and manage GCP network infrastructure, including VPC,
• Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPC
• Peering, Private Service Connect, and Load Balancing.

Strong

• hands-on experience with GKE networking, including VPC-native
• clusters, Pod/Service networking, Alias IPs, Network Policies, Ingress,
• DNS, firewall rules, Private GKE, and GKE connectivity.

Troubleshoot

GCP/GKE connectivity, routing, DNS, ingress/egress, and performance

issues.

Design

secure connectivity between GCP, GKE, on-premises, and other cloud

environments.

Palo Alto Networks

Design,

deploy, configure, and manage Palo Alto VM-Series firewalls on GCP.

Manage

firewall policies, NAT, routing, security zones, application controls,

threat prevention, URL filtering, and logging.

Design

and manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover.

Configure

and troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN.

Manage

Palo Alto PAN-OS upgrades/updates, licensing, subscriptions,

configuration backup/restore, and license-related issues.

Perform

firewall rule optimization, troubleshooting, and security monitoring.

Cloudflare & Cloud Gateway

Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, and

traffic management.

Design

• and manage secure cloud gateway / internet gateway architectures,
• including ingress/egress traffic, NAT, routing, and centralized security
• inspection.

Integrate

Cloudflare, Palo Alto, GCP Load Balancing, and application environments.

Cloud Security

Implement

network security, segmentation, IAM, Zero Trust, encryption, firewall

controls, and secure ingress/egress.

Collaborate

with Security and DevSecOps teams to implement security best practices and

controls.

Support

security incidents, root-cause analysis, and remediation activities.

Automation & Operations

Automate

infrastructure using Terraform, Ansible, and GitOps practices.

Develop

automation/scripts using Python, Bash, or PowerShell.

Use Datadog

and GCP/Palo Alto monitoring and logging for performance monitoring

and troubleshooting.

Maintain

architecture diagrams, configuration standards, and operational

documentation.

Provide

technical guidance and collaborate with Cloud, DevOps, Security, and

Development teams.

Required Skills & Experience

10+

years of overall experience in Network Engineering, Cloud Networking,

Infrastructure, or Cloud Security.

5+

years of hands-on GCP networking experience.

Strong

hands-on experience with GKE networking, architecture, operations, and

troubleshooting.

Strong

experience with Palo Alto Networks firewalls, preferably VM-Series

on GCP.

Experience

with Palo Alto Primary/Secondary or Active-Passive HA.

Strong

experience with Palo Alto firewall policies, NAT, routing, security

zones, and security profiles.

Hands-on

experience with IPsec VPN and GlobalProtect.

Experience

with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and

troubleshooting.

Hands-on

experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.

Strong

knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.

Experience

with Terraform/IaC, Ansible, GitOps, and CI/CD.

Scripting

experience in Python, Bash, or PowerShell.

Experience

with Datadog and cloud monitoring/logging.

Strong

understanding of cloud security, network segmentation, IAM, Zero Trust,

and DevSecOps.

Experience

with hybrid cloud and on-premises connectivity.

Bachelor's

degree in Computer Science, Information Technology, Engineering, or

related field.

Strong

communication, analytical, troubleshooting, and problem-solving skills.

Ability

to work independently and provide technical leadership to engineering

teams.

Preferred Certifications

Cloud Professional Cloud Network Engineer

Google

Cloud Professional Cloud Architect

Palo

Alto PCNSA / PCNSE or equivalent hands-on expertise.

Key Technology Stack

• GCP | GKE | Palo Alto VM-Series | PAN-OS | GlobalProtect
• | Cloudflare | VPN | VPC | Cloud Router | Cloud NAT | Load Balancing |
• Terraform | Ansible | GitOps | Datadog | Python/Bash | DevSecOps

Ideal Candidate

• A 10+ year senior cloud network/security professional with strong hands-on expertise in GCP + GKE Networking + Palo Alto VM-Series
• + Palo Alto HA + VPN + Cloudflare + Cloud Gateway + Security + Terraform,
• capable of independently handling enterprise cloud networking, security
• architecture, production troubleshooting, and automation.