Offensive Security Engineer
U.S. Bank
Director, Cloud Network and Security Engineer
skillventory - A Leading Talent Research Firm
full-time
Posted on:
Location: 🇺🇸 United States
Visit company websiteJob Level
Lead
Tech Stack
AWSAzureCloudDNSFirewallsHAProxyPythonSplunk
About the role
- Designing and implementing scalable, secure, and cost-effective network solutions to support over 4,000 VPCs in AWS and hundreds of VNETs in Azure\n
- Developing cloud-native network designs aligned with business and application requirements\n
- Implementing advanced network security controls to ensure compliance with internal policies and industry standards\n
- Evaluating and recommending cost-efficient services and architectures, while continuously optimizing existing cloud spend\n
- Tuning network performance for speed, reliability, and scalability across multi-cloud environments\n
- Defining requirements for network APIs to enable self-service capabilities at both the network and security layers\n
- Diagnosing and resolving complex network issues within cloud environments and across hybrid infrastructures\n
- Providing Tier 3 operational support and participating in the on-call rotation for critical network incidents\n
- Mentoring and guiding network engineers on modern cloud networking principles and best practices
Requirements
- Deep expertise in AWS cloud networking, including large-scale VPC design, peering, Transit Gateway, and hybrid connectivity\n
- Proficiency in infrastructure as code, particularly with AWS CloudFormation for moderately complex templates\n
- Proficiency in Python, with experience using Boto3 for network automation and orchestration\n
- Solid understanding of IP routing protocols, firewalls, load balancers, proxies, and DNS in cloud and hybrid environments\n
- Experience configuring and optimizing proxy servers such as Squid and HAProxy\n
- A security-first mindset, with experience implementing network security controls and ensuring compliance with enterprise policies\n
- Proven ability to analyze and resolve complex issues using tools like Splunk, DataDog, and native cloud logging/monitoring services\n
- Strong communication skills, with the ability to convey technical concepts to both technical and non-technical stakeholders\n
- 10+ years of experience in IT infrastructure, security, and architecture, with a focus on cloud-native environments\n
- Ability to influence cloud networking strategy and contribute to long-term architectural decisions
