Cloud Network Security Specialist

Sr Cloud Network Security – Palo Alto Location: LATAM (Remote) Engagement Type: Long-Term Consulting Engagement About the Opportunity We are expanding our cloud network security capability within a large-scale, global, hub-and-spoke multi-cloud enterprise environment. This initiative is centered on strengthening Palo Alto Networks security controls across distributed cloud platforms, ensuring consistent policy enforcement, visibility, and lifecycle governance across Azure, AWS, and other cloud environments.

This is not a traditional firewall administration role. The focus is on designing, engineering, and operationalizing cloud-native security architectures that integrate Palo Alto NGFW and Prisma capabilities into automated, scalable, and governed enterprise cloud environments. Position Summary The Sr Cloud Network Security – Palo Alto is responsible for designing, implementing, and operationalizing Palo Alto-based cloud security solutions across multi-cloud environments.

Key accountabilities include: • Designing secure cloud network architectures using Palo Alto NGFW and Prisma solutions • Implementing policy governance and segmentation within hub-and-spoke cloud models • Ensuring scalable, resilient, and compliant security deployments • Integrating security controls into cloud-native automation workflows • Providing lifecycle visibility and governance across distributed cloud regions Key Responsibilities Cloud Security Architecture & Engineering • Design and implement Palo Alto NGFW and Prisma Cloud deployments across Azure, AWS, and hybrid environments • Engineer secure hub-and-spoke cloud architectures with centralized and distributed inspection models • Configure and manage firewall policies, NAT rules, security zones, and traffic segmentation • Implement SSL decryption, threat prevention, URL filtering, and advanced security profiles Multi-Cloud Security Integration • Align Palo Alto security controls with Azure VNet, AWS VPC, and GCP networking constructs • Implement secure connectivity patterns including VPN, IPsec, and private endpoints • Integrate load balancers and public IP architectures with cloud-native security enforcement • Ensure consistent policy enforcement across multiple cloud regions Automation & Governance • Support Infrastructure as Code (Terraform) deployments of Palo Alto configurations • Integrate firewall deployments into CI/CD pipelines • Implement structured logging and centralized monitoring (Panorama, SIEM integration) • Maintain lifecycle governance and configuration state tracking Required Qualifications • 8+ years of experience in network security engineering • Strong hands-on experience with Palo Alto Networks (NGFW mandatory; Prisma Cloud preferred) • Experience designing cloud network security in Azure and/or AWS environments • Deep understanding of TCP/IP, routing, NAT, VPN, SSL/TLS, and L4–L7 inspection • Experience working within hub-and-spoke cloud network models • Strong understanding of cloud-native networking constructs (VNet, VPC, subnets, routing tables) • Experience integrating security solutions into enterprise ITSM workflows • Strong troubleshooting and production support experience • Excellent written and verbal communication skills Preferred Qualifications • Palo Alto certifications (PCNSE preferred) • Experience with Panorama centralized management • Exposure to Terraform or Infrastructure as Code frameworks • Experience in regulated enterprise environments • Familiarity with Zero Trust security models • Knowledge of cloud-native security tooling and observability platforms Why Work With Us • Lead cloud security modernization initiatives at enterprise scale • Work within a sophisticated multi-cloud hub-and-spoke architecture • High-visibility role with meaningful security ownership • Long-term consulting engagement with strategic impact • Collaborative global engineering model focused on secure cloud transformation