Network Security Engineer – Cloud & On-Premise

About the role

We are looking for a Network Security Engineer to design, implement and maintain secure, high‑availability network infrastructure for our financial services platform. The role spans on‑premise LAN/WAN environments and AWS cloud networking, ensuring reliable connectivity for the business.

Key responsibilities

• Design, configure and deploy network solutions on AWS and on‑premises, including routers, switches, firewalls and wireless access points.
• Set up and manage LAN, WAN and VPN connectivity to support business operations.
• Design and configure Amazon VPCs, subnets, route tables, gateways and related services.
• Implement secure connectivity such as AWS Direct Connect, Site‑to‑Site VPN and Transit Gateway.
• Build hybrid network architectures that integrate on‑premise and AWS environments.
• Configure and manage AWS NACLs, Security Groups and AWS WAF.
• Monitor network performance with CloudWatch, VPC Flow Logs and other tools.
• Troubleshoot routing, latency and connectivity issues in both cloud and on‑premise networks.
• Research, recommend and implement upgrades to network security architecture.
• Record, analyse and report on network security metrics and trends.
• Develop and enforce IT standards and compliance frameworks (ISO 27001, PCI‑DSS).
• Maintain IT inventory and related documentation.

Required profile

• BSc in Electrical Engineering, Computer Engineering, IT, Computer Science or related field.
• 4–6 years of experience designing, implementing and managing corporate networks.
• Proven experience with AWS networking services and cloud infrastructure.
• Cisco certification (CCNA/CCNP) preferred.
• Strong understanding of networking protocols such as TCP/IP, DNS, BGP, OSPF and HTTP/S.

Required skills

• AWS VPC, Direct Connect, Transit Gateway, Elastic Load Balancing, Route 53, Global Accelerator.
• AWS CloudWatch, VPC Flow Logs, AWS WAF.
• Cisco routing and switching, firewalls, wireless access points.
• LAN, WAN, VPN design and implementation.
• Network security controls and compliance (ISO 27001, PCI‑DSS).