Cloud Security (Azure / AWS / GCP)
Implement cloud security baselines, guardrails, and compliance controls in line with CIS, NIST, and ISO27001 standards.
Support network and security posture configuration utilizing tools such as Wiz and Prisma.
Configure and troubleshoot cloud-native firewalls, Network Security Groups (NSGs), routing, and segmentation.
Network Security (Fortigate)
Manage, monitor, and troubleshoot Fortigate firewalls, including security policies, NAT, VPN (IPsec/SSL), and routing.
Oversee IPS/IDS configurations and threat profiles.
Ensure high availability operations (Active/Passive).
Support network segmentation, micro-segmentation, and Zero Trust enforcement.
Participate in firewall rule reviews, change management, and impact assessments.
Analyze traffic flows, logs, and events using FortiAnalyzer tools.
Automation & Infrastructure as Code
Develop Terraform modules for IAM, KMS, vault, firewall policies, and cloud security controls.
Create Ansible playbooks to automate secret rollout, certificate deployments, firewall configurations, and configuration baselines.
Support Kubernetes environments, focusing on secret management, RBAC, service accounts, workload identity, and Vault injector integration.
Documentation & Governance
Maintain Standard Operating Procedures (SOPs), runbooks, architecture diagrams, and compliance documentation.
Support internal audits, security reviews, and posture reporting.
Required Skills and Experience
Hands-on experience with Terraform and Ansible.
Looking for 5 - 7 Years of experience.
Strong understanding of identity protocols, including SAML, OAuth2, OIDC, LDAP, and Kerberos.
Experience with Azure AD/Entra ID, AWS IAM, and GCP IAM.
Expertise in HashiCorp Vault, Azure Key Vault, and AWS KMS.
Proficiency in Kubernetes RBAC, secrets management, and workload identity management.
Solid understanding of PKI, TLS certificates, and cryptographic primitives.
Strong Linux administration skills (RHEL/CentOS/Rocky Linux).
Familiarity with firewall technologies, particularly Fortigate (firewall/NAT/VPN/IPS/URL filtering) and cloud security controls across Azure, AWS, and GCP.
Desired/Bonus Skills
Certifications in Azure Security Engineer, AWS Security, or GCP Security.
Network Security certification, such as Fortinet NSE (NSE4+).
AWS Security Specialty certification.
