Cloud Engineer (L2) will take ownership of cloud networking, security, and advanced troubleshooting, supporting enterprise-scale environments and driving secure, scalable implementations.

Main Tasks

• Essential Duties and Responsibilities Mandatory Skills

  • Provide L2 support for cloud networking services (AWS/Azure)
  • Troubleshoot complex issues related to: VPC/VNet, DNS, routing, latency and Hybrid connectivity (VPN, MPLS, SD-WAN integration)

  Configure and manage:

  • VPN (IPSec), NAT, ACLs, routing policies
  • Cloud-native firewalls (AWS/Azure) and enterprise firewalls
  • Handle Sev1/Sev2 incidents and critical escalations
  • Support cloud migrations, deployments, and design discussions
  • Collaborate with NSO, DevOps, and Security teams
  • Ensure security best practices, compliance, and standardization
  • Participate in on-call rotation and incident management
  • Drive automation and continuous improvement initiatives
  • Develop and maintain Infrastructure-as-Code (e.g., Terraform, Bicep) for cloud networking and security configurations
  • Build and operate CI/CD pipelines (e.g., GitHub Actions, Azure DevOps Pipelines) for network and security deployments
  • Apply Git-based workflows (branching, pull requests, code review) for change management
  • Implement and maintain cloud-native policy frameworks (e.g., Azure Policy, AWS SCPs) and CIS Benchmarks

• Mandatory Skills (L2 – Enhanced Security Focus)

  • Strong experience in:
  • AWS Networking (VPC, Route 53, WAF, Firewall) or Azure Networking
  • Hands-on expertise in security technologies, such as:
  • Palo Alto or Fortinet firewalls and SD-WAN solutions
  • Strong knowledge of:
  • VPN (IPSec), ACLs, NAT, secure architecture design
  • Network security policies and segmentation
  • Hands-on experience with:
  • Infrastructure-as-Code: at least one of Terraform, Bicep, Pulumi, CloudFormation
  • CI/CD pipelines: at least one of GitHub Actions, Azure DevOps Pipelines, GitLab CI, Jenkins
  • Git workflows (branching, pull requests, code review)
  • Working knowledge of:
  • Cloud-native policy frameworks (Azure Policy, AWS SCPs) and CIS Benchmarks
  • Cloud provider security best practices (Microsoft, AWS)

Skills

Experience

Education and/or Work Experience in Years:

• Diploma / Graduation or B.E from reputed University or Institute.
• 4 to 7 years of progressive experience in networking, enterprise routing, network security, with basic exposure to Azure cloud networking.
• Ability to work independently and to carry out assignments to completion within parameters of instructions given, prescribed routines, and standard accepted practices.
• Taking ownership for Incident tickets and resolve within SLA.
• Knowledge of ITIL disciplines such as Incident, Problem and Change Management.

Good to Have/Advantage/Certifications

• Certification: AWS Solutions Architect / Azure Administrator
• Palo Alto / Fortinet / SD-WAN certifications (added advantage)
• Deep expertise in specific IaC tools (e.g., Terraform) and CI/CD platforms (e.g., GitHub Actions)
• Familiarity with Zero Trust principles and segmentation strategies
• Experience in developing and building security content, scripts, tools, or methods to enhance the investigation processes. [Python/Shell]
• ISO 27001 awareness