Cloud Network Security Engineer

Overview:

The Cloud Network Engineer will be part of the on-call support team for the new Fortinet IPS firewall system for SaaS production. The network engineer is part of the Cloud Security team supporting production endpoints, vulnerability scanning and firewall configurations. This role will work with internal Revvity teams across the organization to remediate and solve network and security vulnerability issues.

Responsibilities include:

• Design, configure, deploy, and troubleshoot cloud network security solutions in AWS, ensuring high availability, security, and compliance.
• Demonstrate in-depth understanding of networking to include routing, switching, firewall (stateful/stateless), network monitoring and management.
• Expertise in designing, configuring, implementing, and troubleshooting these various technologies and protocols.
• Expertise with Amazon Web Services (AWS) demonstrating experience designing, configuring, provisioning, and deploying solutions specifically at the network layer.
• Monitor, detect, and respond to network security threats using IPS/SIEM, threat intelligence, and automated security controls.
• Excellent ability to collaborate with other IT disciplines (e.g. DevOps, Platform, Application) to troubleshoot and resolve complex problems.
• Create detailed, comprehensive, and well-structured test plans and test cases.
• Drive enhancements through full life cycle from network security concept to final implementation and support.
• Participate in disaster recovery development, exercises, and actual events.
• Participate in 24x7 on call rotation and assist in resolving issues outside normal business hours.
• Maintain systems and documentation as needed for audits and compliance.
• Stay updated on emerging threats, vulnerabilities, and cloud security best practices to enhance the organization's security posture.
• Strong desire to keep technical skills current and remain abreast of emerging technologies.

Preferred Qualifications:

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field with 3+ years of relevant experience in cloud network security.

• Certifications preferred: AWS Certified Advanced Networking – Specialty, AWS Security Specialty, Cisco CCNP/CCIE, Fortinet NSE, Juniper JNCIS/JNCIP, or Security+.
• Proficiency in automation and Infrastructure-as-Code (IaC) using Terraform, AWS CloudFormation, or Ansible for network and security configurations.
• Experience with network configuration protocols and tools such as NETCONF, YANG, and RESTCONF, and Wireshark.
• Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions, particularly in cloud-native environments.
• Knowledge of Fortinet, Palo Alto, or Check Point firewalls and cloud security best practices.
• Experience with network security monitoring and log analysis tools, including Fortinet Analyzer (FAZ),SIEM, AWS GuardDuty, and VPC Flow Logs.