Job Title Senior Cloud Network & Security Engineer GCP / Palo Alto

Location: Hyderabad

Department: IT (On-Prem)and Cloud Infra Managed Services Delivery

Experience: 10+ Years

Job Summary

We are looking for a Senior Cloud Network & Security Engineer with 10+ years of overall experience in network engineering, cloud networking, and security. The candidate should have strong hands-on experience with GCP networking, GKE networking, Palo Alto Networks firewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybrid connectivity.

The role will be responsible for designing, implementing, securing, troubleshooting, and maintaining highly available cloud network infrastructure and security solutions.

Key Responsibilities

GCP & GKE Networking

- Design, implement, and manage GCP network infrastructure, including VPC, Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPC Peering, Private Service Connect, and Load Balancing.
- Strong hands-on experience with GKE networking, including VPC-native clusters, Pod/Service networking, Alias IPs, Network Policies, Ingress, DNS, firewall rules, Private GKE, and GKE connectivity.
- Troubleshoot GCP/GKE connectivity, routing, DNS, ingress/egress, and performance issues.
- Design secure connectivity between GCP, GKE, on-premises, and other cloud environments.

Palo Alto Networks

- Design, deploy, configure, and manage Palo Alto VM-Series firewalls on GCP.
- Manage firewall policies, NAT, routing, security zones, application controls, threat prevention, URL filtering, and logging.
- Design and manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover.
- Configure and troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN.
- Manage Palo Alto PAN-OS upgrades/updates, licensing, subscriptions, configuration backup/restore, and license-related issues.
- Perform firewall rule optimization, troubleshooting,



and security monitoring.

Cloudflare & Cloud Gateway

- Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, and traffic management.
- Design and manage secure cloud gateway / internet gateway architectures, including ingress/egress traffic, NAT, routing, and centralized security inspection.
- Integrate Cloudflare, Palo Alto, GCP Load Balancing, and application environments.

Cloud Security

- Implement network security, segmentation, IAM, Zero Trust, encryption, firewall controls, and secure ingress/egress.
- Collaborate with Security and DevSecOps teams to implement security best practices and controls.
- Support security incidents, root-cause analysis, and remediation activities.

Automation & Operations

- Automate infrastructure using Terraform, Ansible, and GitOps practices.
- Develop automation/scripts using Python, Bash, or PowerShell.
- Use Datadog and GCP/Palo Alto monitoring and logging for performance monitoring and troubleshooting.
- Maintain architecture diagrams, configuration standards, and operational documentation.
- Provide technical guidance and collaborate with Cloud, DevOps, Security, and Development teams.

Required Skills & Experience

- 10+ years of overall experience in Network Engineering, Cloud Networking, Infrastructure, or Cloud Security.
- 5+ years of hands-on GCP networking experience.
- Strong hands-on experience with GKE networking, architecture, operations, and troubleshooting.
- Strong experience with Palo Alto Networks firewalls, preferably VM-Series on GCP.




- Experience with Palo Alto Primary/Secondary or Active-Passive HA.
- Strong experience with Palo Alto firewall policies, NAT, routing, security zones, and security profiles.
- Hands-on experience with IPsec VPN and GlobalProtect.
- Experience with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and troubleshooting.
- Hands-on experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.
- Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.
- Experience with Terraform/IaC, Ansible, GitOps, and CI/CD.
- Scripting experience in Python, Bash, or PowerShell.
- Experience with Datadog and cloud monitoring/logging.
- Strong understanding of cloud security, network segmentation, IAM, Zero Trust, and DevSecOps.
- Experience with hybrid cloud and on-premises connectivity.

Qualifications

- Bachelor's degree in Computer Science, Information Technology, Engineering, or related field.
- Strong communication, analytical, troubleshooting, and problem-solving skills.
- Ability to work independently and provide technical leadership to engineering teams.

Preferred Certifications

- Google Cloud Professional Cloud Network Engineer
- Google Cloud Qualified Cloud Architect
- Palo Alto PCNSA / PCNSE or equivalent hands-on expertise.

Key Technology Stack GCP | GKE | Palo Alto VM-Series | PAN-OS | GlobalProtect | Cloudflare | VPN | VPC | Cloud Router | Cloud NAT | Load Balancing | Terraform | Ansible | GitOps | Datadog | Python/Bash | DevSecOps

Ideal Candidate A 10+ year senior cloud network/security professional with strong hands-on expertise in GCP + GKE Networking + Palo Alto VM-Series + Palo Alto HA + VPN + Cloudflare + Cloud Gateway + Security + Terraform, capable of independently handling enterprise cloud networking, security architecture, production troubleshooting, and automation.

📌 Sr. Network Engineer and Security. (Hyderabad)
🏢 SELECCIÓN Consulting
📍 Hyderabad