[Hiring] Cloud Network Security Subject Matter Expert @Core4ce

Role Description

We are seeking a highly skilled and experienced Cloud Network Security Subject Matter Expert (SME) to join our Cyber Security Engineering & Design team. In this critical role, you will be responsible for designing, implementing, and maintaining secure cloud network solutions, evaluating emerging technologies, and providing technical leadership across a multi-vendor enterprise environment. You will be a key contributor to our efforts in securing both cloud and on-premise infrastructure, supporting migrations, and ensuring compliance with DoD security directives.

Responsibilities:

• Network Security Engineering & Design:
  • Develop, engineer, and document emerging technology solutions across a multi-vendor platform.
  • Support enterprise security architecture for commercial and GOV cloud environments (Amazon, Microsoft Azure, and Oracle).
  • Implement Web Application Firewalls (WAF), Network Access Control (NAC), malware/zero-day detection, SSL decryption, and more.
• Cloud Security Implementation:
  • Design, deploy, upgrade, and support security components in a hybrid cloud network.
  • Configure and maintain cloud-native security components such as network security groups and ACLs.
• Automation & Scripting:
  • Leverage scripting and automation technologies (Python, PowerShell, F5 iRules).
• Troubleshooting & Optimization:
  • Troubleshoot and analyze server performance and workload distribution.
  • Assist with the implementation and optimization of server monitoring tools.
• Network Connectivity:
  • Extend on-premise networks to the cloud over direct connect and private gateways.
• Security Expertise:
  • Support migrations of various applications to the cloud environment.
  • Provide expertise in Transport Layer Security (TLS) decryption and inspection.
• Collaboration & Leadership:
  • Collaborate with other Network and Security SMEs.
  • Participate in team meetings and provide status reports.
• Documentation & Training:
  • Develop and maintain comprehensive documentation.
  • Create educational materials and conduct instructional sessions.
• Business Planning & Compliance:
  • Participate in business planning meetings to recommend technical solutions.
  • Adhere to change management policies and ensure compliance with DoD security directives.
• Knowledge Sharing:
  • Proactively share technical and non-technical knowledge.
  • Seek opportunities for professional development through certifications, training, or conferences.

Qualifications

• Bachelor’s degree in Computer Science or a related technical field, or equivalent experience (5-7 years in a network engineering or telecommunications environment).
• Must be able to obtain TS security clearance.
• OS Certification (CCNA or higher) required; equivalent knowledge to a CCNP certification level.
• 8570 Requirement: Engineering – IAT Level II (One of CCNA Security, CySA+, GICSP, GSEC, Security+ CE or SSCP).
• Knowledge of Cisco routers, switches, and firewalls.
• IP Network Design & Troubleshooting Skills.
• Understanding of authentication schemes, security assessment, and network management.
• Experience designing and deploying network solutions in enterprise environments.
• Excellent written and verbal communication skills.
• Experience in large-scale enterprise network rollout and support.

Requirements

• Expertise with LAN/WAN technologies throughout a global infrastructure.
• Minimum 10 years Network Administration experience (Cisco, Palo Alto, F5, Fidelis, etc.).
• Minimum 3 years of F5 experience (SSLO, ASM, C3D, LTM, GSLB).
• Minimum 4 years of experience working on enterprise-sized networks.
• Experience working with Network Automation frameworks (NetMiko, Napalm, Pandevice).
• Experience with Application Programming Interfaces (API) of various network devices.
• Experience in commercial and on-premises private cloud environments (AWS, Azure).
• Cloud automation utilizing Java, Jenkins, Python, PowerShell, DevOps, Code Deploy and Cloud Formation.
• Cloud networking technologies (Transit Gateway, Customer Gateways, Virtual Private Gateways, Internet Gateways, Peering, MeetMe, UDR, ExpressRoute).
• Cloud management and security (IAM, Azure Active Directory, AWS Key Management Service, Azure Encryption models).
• Native cloud security tools (Azure Security Center, Azure Virtual Network TAP, Azure Log, AWS logging and CloudWatch), and non-native cloud security tools.
• Technical writing skills.
• Experience with TCPDump and Wireshark for network traffic analysis.
• Experience with implementing Office 365 in an Enterprise environment.
• Understanding of SaaS and IaaS private cloud connectivity to an Enterprise environment.
• Experience with Cisco CSRv1000 and Palo Alto virtual firewalls.
• Experience working in a healthcare or DoD environment.
• Minimum of 3 years of experience in AWS, Azure and/or OCI.
• Minimum of 3 years of experience with Python or PowerShell.

Benefits

• 401(k) with 100% company match on the first 6% deferred, with immediate vesting.
• Comprehensive medical, dental, and vision coverage—employee portion paid 100% by Core4ce.
• Unlimited access to training and certifications, with no pre-set cap on eligible professional development.
• Tuition assistance for job-related degrees and courses.
• Paid parental leave, PTO that grows with tenure, and generous holiday schedules.
• The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.