> Markdown version of [/jobs/ext/2844331-cloud-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/2844331-cloud-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Network Security Engineer

- **Company:** Blackrock, Inc.
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $162,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cloud Computing Security, Cloud Engineering, Configuration Management, Cyber Security, Computer Programming, Computer Networks, Linux, DevOps, Cryptographic Protocols, Github, Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Subnetting, JSON, Python (Programming Language), Network Security, Netconf, Network Segmentation, Open Shortest Path First (OSPF), Ansible, Zero Trust Network Access, Security Information and Event Management, Extensible Markup Language (XML), Cloud-native Network Functions (CNF), Scripting, Google Cloud, Load Balancing, Istio, Multi-Cloud, HybridCloud, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Gitlab, Containerization, Kubernetes, Infrastructure Automation Frameworks, Terraform, Oracle Cloud Infrastructure, Splunk, Software Version Control, Vulnerability Analysis
- **Published:** September 11, 2026
- **Apply:** https://www.manhattanjobs.com/job.asp?id=3386395312&tx=DT10899UTT&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

* Excellent collaboration skills to work effectively across teams, along with strong verbal and written communication abilities.
 * Expertise in network security protocols (IPSec, TLS, MacSec, etc.) and encryption standards.
 * Experience with cloud networking services: VPC, VNets, Subnets, Load Balancers.
 * Proficiency with IaC Tools and Frameworks: Comfortable working with tools such as Terraform, Ansible to automate infrastructure provisioning and security configuration
 * Proficient in AI tooling & innovation
 * Preferred Tools & Technologies
 * Infrastructure as Code (IaC) tools for provisioning cloud resources., Automation tools for configuration management and deployment, Python scripting.
 * Git/GitHub/GitLab for version control.
 * SIEM tools (Splunk) for monitoring.
 * Ensure compliance with regulatory frameworks (ISO 27001, SOC2, GDPR).
 * Cloud-Native distributed containerized microservice orchestration Network Policies, Istio, Calico.
 * Strong knowledge of networking protocols (BGP, OSPF).
 * Understanding of Open Container Initiative (OCI) container image packaging and runtime/Netconf-yang/Linux/ API programming /JSON /XML /GitHub., * 5+ years in cloud network engineering and security.
 * Hands-on experience with hybrid cloud connectivity and secure design patterns.
 * Strong analytical and problem-solving abilities.
 * Excellent communication and documentation skills

Preferred skills

 * Work closely with DevOps, Cloud Engineering, and Security Operations teams to deliver key projects.
 * Provide technical guidance and documentation for security best practices.
 * Excellent collaboration skills to work effectively across teams, along with strong verbal and written communication abilities.

## Description

The Cloud Network Security Engineer is responsible for automating, designing, implementing, and maintaining secure networking environments across public, private, and hybrid cloud platforms. This role ensures confidentiality, integrity, and availability of data and services by applying advanced security principles, and compliance standards.

You'll pair strong engineering fundamentals with an AI-driven approach to solving problems-leveraging automation, intelligent tooling, and emerging AI capabilities to reduce operational toil, accelerate delivery, and enhance the developer experience. As a technical leader, you will help shape platform strategy, influence architectural direction, mentor engineers, and drive the adoption of next-generation engineering practices that define the future of Aladdin.

YOUR RESPONSIBILITIES

Architecture & Design

Develop secure network architectures for hybrid & multi cloud environments (AWS, Azure, GCP).

 * Architect robust security solutions for containerized applications.Implement network segmentation, micro-segmentation, and zero-trust principles.Design end-to-end encrypted connectivity patterns.Design secure network architecture for containerized environments i.e. Open Container Initiative (OCI) container packaging and runtimeDesign scalable / dynamic security patterns, leveraging tag & identity-based attributes.

Security Implementation

 * Configure and manage cloud-native firewalls, security groups, network ACLs and network security appliances.
 * Deploy intrusion detection/prevention systems and threat monitoring tools.

Operations & Monitoring

 * Monitor cloud network traffic for anomalies and potential breaches.
 * Remediate vulnerability assessments and penetration testing on cloud networks.
 * Respond to and investigate cloud security incidents.
 * Automation & Optimization
 * Strong understanding of Infrastructure as Code (IaC) tools and CI/CD pipelines for secure deployments.
 * Automate security policy enforcement and configuration management.
 * Proficient in scripting with Python to automate network tasks, build integrations, and manage workflows., AWS Certified Security Specialty, Azure Security Engineer Associate, Certified Enterprise-grade container orchestration platform supporting declarative infrastructure and horizontal scaling Security Specialist (CKS), CISSP or CCSP.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)