Job Description

Job Title

Senior Cloud Network & Security Engineer – GCP / Palo
Alto

Location: Hyderabad

Department: IT (On-Prem)and Cloud Infra Managed Services Delivery

Experience: 10+ Years

Job Summary

We are looking for a Senior Cloud Network & Security
Engineer with 10+ years of overall experience in network
engineering, cloud networking, and security. The candidate should have strong
hands-on experience with GCP networking, GKE networking, Palo Alto Networks
firewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybrid
connectivity.

The role will be responsible for designing, implementing,
securing, troubleshooting, and maintaining highly available cloud network
infrastructure and security solutions.

Key Responsibilities

GCP & GKE Networking

- Design,
implement, and manage GCP network infrastructure, including VPC,
Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPC
Peering, Private Service Connect, and Load Balancing.

- Strong
hands-on experience with GKE networking, including VPC-native
clusters, Pod/Service networking, Alias IPs, Network Policies, Ingress,
DNS, firewall rules, Private GKE, and GKE connectivity.

- Troubleshoot
GCP/GKE connectivity, routing, DNS, ingress/egress, and performance
issues.

- Design
secure connectivity between GCP, GKE, on-premises, and other cloud
environments.

Palo Alto Networks

- Design,
deploy, configure, and manage Palo Alto VM-Series firewalls on GCP.

- Manage
firewall policies, NAT, routing, security zones, application controls,
threat prevention, URL filtering, and logging.

- Design
and manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover.

- Configure
and troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN.

- Manage
Palo Alto PAN-OS upgrades/updates, licensing, subscriptions,
configuration backup/restore, and license-related issues.

- Perform
firewall rule optimization,



troubleshooting, and security monitoring.

Cloudflare & Cloud Gateway

- Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, and
traffic management.

- Design
and manage secure cloud gateway / internet gateway architectures,
including ingress/egress traffic, NAT, routing, and centralized security
inspection.

- Integrate
Cloudflare, Palo Alto, GCP Load Balancing, and application environments.

Cloud Security

- Implement
network security, segmentation, IAM, Zero Trust, encryption, firewall
controls, and secure ingress/egress.

- Collaborate
with Security and DevSecOps teams to implement security best practices and
controls.

- Support
security incidents, root-cause analysis, and remediation activities.

Automation & Operations

- Automate
infrastructure using Terraform, Ansible, and GitOps practices.

- Develop
automation/scripts using Python, Bash, or PowerShell.

- Use Datadog
and GCP/Palo Alto monitoring and logging for performance monitoring
and troubleshooting.

- Maintain
architecture diagrams, configuration standards, and operational
documentation.

- Provide
technical guidance and collaborate with Cloud, DevOps, Security, and
Development teams.

Required Skills & Experience

- 10+
years of overall experience in Network Engineering, Cloud Networking,
Infrastructure, or Cloud Security.

- 5+
years of hands-on GCP networking experience.

- Strong
hands-on experience with GKE networking, architecture, operations, and
troubleshooting.

- Strong
experience with Palo Alto Networks firewalls, preferably VM-Series
on GCP.





- Experience
with Palo Alto Primary/Secondary or Active-Passive HA.

- Strong
experience with Palo Alto firewall policies, NAT, routing, security
zones, and security profiles.

- Hands-on
experience with IPsec VPN and GlobalProtect.

- Experience
with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and
troubleshooting.

- Hands-on
experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust.

- Strong
knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS.

- Experience
with Terraform/IaC, Ansible, GitOps, and CI/CD.

- Scripting
experience in Python, Bash, or PowerShell.

- Experience
with Datadog and cloud monitoring/logging.

- Strong
understanding of cloud security, network segmentation, IAM, Zero Trust,
and DevSecOps.

- Experience
with hybrid cloud and on-premises connectivity.

Qualifications

- Bachelor's
degree in Computer Science, Information Technology, Engineering, or
related field.

- Strong
communication, analytical, troubleshooting, and problem-solving skills.

- Ability
to work independently and provide technical leadership to engineering
teams.

Preferred Certifications

- Google
Cloud Professional Cloud Network Engineer

- Google
Cloud Professional Cloud Architect

- Palo
Alto PCNSA / PCNSE or equivalent hands-on expertise.

Key Technology Stack

GCP | GKE | Palo Alto VM-Series | PAN-OS | GlobalProtect
Cloudflare | VPN | VPC | Cloud Router | Cloud NAT | Load Balancing |
Terraform | Ansible | GitOps | Datadog | Python/Bash | DevSecOps

Ideal Candidate

A 10+ year senior cloud network/security professional with robust hands-on expertise in GCP + GKE Networking + Palo Alto VM-Series
+ Palo Alto HA + VPN + Cloudflare + Cloud Gateway + Security + Terraform,
capable of independently handling enterprise cloud networking, security
architecture, production troubleshooting, and automation.

📌 Senior Cloud Network & Security Engineer GCP / Palo Alto (Hyderabad)
🏢 Important Group
📍 Hyderabad