Network & Cloud Security Specialist

Job Summary

The Network & Cloud Security Specialist is responsible for architecting, deploying, securing, and maintaining the organization's network and cloud environments. This role ensures high availability, scalability, and performance of enterprise systems while enforcing robust security policies across hybrid infrastructures. The specialist will play a key role in supporting digital transformation initiatives, regulatory compliance, and cybersecurity resilience.

Key Responsibilities

1. Firewall & Network Infrastructure Management

2. Administer and maintain network devices including routers, switches, firewalls (e.g., FortiGate), and load balancers.

3. Design, implement, and manage LAN, WAN, VPN, and SD-WAN connectivity across enterprise sites.
4. Monitor and optimize network performance, reliability, and redundancy.
5. Conduct regular network assessments, patching, and upgrades.

6. Ensure network configurations comply with cybersecurity and regulatory standards.

7. Cloud Security Management

8. Design and enforce security policies across Microsoft Intune and Entra ID.

9. Administer identity governance, RBAC, PIM, and conditional access policies.
10. Implement endpoint security baselines and manage secure MDM/MAM configurations.
11. Monitor and respond to security alerts and incidents within Microsoft 365 and Azure ecosystems.

12. Integrate Entra ID securely with third-party applications and services.

13. Cloud Architecture & Operations

14. Deploy, manage, and monitor cloud infrastructure (AWS, Microsoft Entra ID).

15. Manage hybrid and multi-cloud environments integrating on-premises systems with cloud services.
16. Automate provisioning, scaling, and backup processes.

17. Optimize cloud resource utilization and costs using governance and monitoring tools.

18. Security & Compliance

19. Implement network and cloud security controls including firewalls, VPNs, encryption, and identity management

20. Conduct vulnerability assessments and collaborate with cybersecurity teams to mitigate threats.
21. Maintain compliance with data protection regulations (e.g., ISO 27001, GDPR, PDPA, DTPM, SS714:2025).

22. Document and maintain security configurations, procedures, and audit logs.

23. System Monitoring & Troubleshooting

24. Use tools such as System monitoring and troubleshooting tools to monitor to track system health and performance.

25. Diagnose and resolve connectivity, latency, and availability issues.

26. Establish and maintain incident response and disaster recovery procedures.

27. Collaboration, Documentation & Training

28. Collaborate with IT operations, infrastructure, and cybersecurity teams to ensure cohesive security and operational practices.

29. Prepare detailed network diagrams, cloud architecture documentation, and SOPs.

30. Provide technical support and training to internal teams on cloud and network security best practices.

31. Project Work

32. Lead or support cross-functional projects and perform other duties as required due to exigencies of work.

33. Qualifications
34. Bachelor's Degree in Computer Science, Information Technology, Information Security, or related field.
35. 3–7 years of experience in network administration, cloud infrastructure, and cloud security management.
36. Hands-on experience with Microsoft Intune and Entra ID (Azure AD).
37. Strong understanding of TCP/IP, routing, switching, DNS, DHCP, VPN, and cloud-native networking.
38. Experience with scripting and automation tools (e.g., PowerShell)
39. Certifications (Preferred)
40. Cisco CCNA/CCNP
41. AWS Certified Solutions Architect / Azure Administrator Associate
42. Microsoft Certified: Security Operations Analyst Associate
43. Microsoft Certified: Identity and Access Administrator Associate
44. Microsoft Certified: Endpoint Administrator Associate
45. CompTIA Network+ /Cloud

Core Competencies:

• Network design and optimization
• Cloud architecture and deployment
• Security and compliance management
• Infrastructure automation
• Analytical problem-solving
• Documentation and communication
• Identity and access governance
• Endpoint protection and policy enforcement
• Reporting Line
• Reports to: Senior Manager, Enterprise IT & Cybersecurity
• Supervises: Network and Systems Executives (as applicable)