Network & Security Engineer (Cloud Principle)

Job Purpose:In this critical role, you will be at the forefront of designing and securing our advanced networking systems. Your work will directly contribute to the foundation that enables the organization to deliver high-quality services and solutions to our technology infrastructure. You will tackle a variety of challenges ranging from day-to-day operational security issues to strategic initiatives for future networking expansions. You will be responsible for designing, implementing, and managing the organization's network and security infrastructure with a specific focus on cloud networking and content delivery solutions. This role ensures the performance, reliability, and security of the organization's network systems, supporting business operations and enhancing end-user experience. You will work on optimizing cloud-based networking components, managing bContent Delivery Networks (CDNs), securing network traffic, and ensuring compliance with industry standards and regulatory requirements.Responsibilities:Network Configuration and Optimization Design, implement, and manage cloud network infrastructure, including Virtual Private Clouds (VPCs), subnets, and routing configurations. Optimize network performance, security, and scalability in AWS cloud environments. Utilize Infrastructure as Code (IaC) technology such as Terraform to automate the provisioning and operation of networking and security services. Design, configure, and fine-tune network hardware including routers and switches, as well as network management software.  Cybersecurity and Content Delivery Management Oversee the implementation and management of critical network security and delivery technologies including Content Delivery Networks (CDN), Web Application Firewalls (WAF), Domain Name Systems (DNS), and Anti-DDoS (Distributed Denial of Service) protection systems. Optimize dynamic content delivery to ensure high availability and fast response times across global networks, enhancing security protocols to protect against web-based threats, and ensuring robust DNS management practices. Configure and maintain proxy servers to enhance content distribution and network efficiency. Develop and implement strategies to mitigate DDoS and Bot attacks, safeguarding our infrastructure from such disruptions and maintaining service continuity.  Advanced Security Management and Threat Mitigation Implement and manage sophisticated security measures including firewalls, anti-virus software, patch management systems, and other effective technologies to protect systems against threats. Regularly perform vulnerability assessments and network penetration tests to identify and resolve security threats. Develop and enforce comprehensive security protocols that prevent unauthorized access and data breaches. Policy Development and Implementation Develop, implement, and manage comprehensive policies for network use and security in alignment with organizational objectives and compliance requirements. Spearhead the establishment and maintenance of an Information Security Management System (ISMS) that includes the formulation of security policies, procedures, and controls to ensure data protection and compliance with international standards like ISO/IEC 27001. Lead the effort to train users and promote security awareness across the organization to ensure system security and improve network efficiency. Additionally, monitor the effectiveness of the ISMS, conducting regular reviews and updates to adapt to new security challenges and regulatory changes. Forensic Analysis and Reporting Utilize advanced analytical tools to monitor security logs and alerts for signs of potential security incidents. Conduct detailed forensic analysis in the event of a security incident. Prepare reports of findings and make recommendations for the enhancement of security protocols. Collaborative Network Solutions Work closely within the IT department and external stakeholders to create synergistic network solutions. Collaborate on projects that integrate sophisticated technology and require advanced network configuration and troubleshooting.  Other Responsibilities as Assigned