Senior Cloud Network & Security Engineer – GCP / Palo Alto

Job Description Job Title Senior Cloud Network & Security Engineer – GCP / Palo Alto Location: Hyderabad Department: IT (On-Prem)and Cloud Infra Managed Services Delivery Experience: 10+ Years Job Summary We are looking for a Senior Cloud Network & Security Engineer with 10+ years of overall experience in network engineering, cloud networking, and security. The candidate should have strong hands-on experience with GCP networking, GKE networking, Palo Alto Networks firewalls/VM-Series, VPN, Cloudflare, cloud gateways, automation, and hybrid connectivity. The role will be responsible for designing, implementing, securing, troubleshooting, and maintaining highly available cloud network infrastructure and security solutions. Key Responsibilities GCP & GKE Networking Design, implement, and manage GCP network infrastructure, including VPC, Shared VPC, subnets, routing, Cloud Router, Cloud NAT, Cloud VPN, VPC Peering, Private Service Connect, and Load Balancing. Strong hands-on experience with GKE networking, including VPC-native clusters, Pod/Service networking, Alias IPs, Network Policies, Ingress, DNS, firewall rules, Private GKE, and GKE connectivity. Troubleshoot GCP/GKE connectivity, routing, DNS, ingress/egress, and performance issues. Design secure connectivity between GCP, GKE, on-premises, and other cloud environments. Palo Alto Networks Design, deploy, configure, and manage Palo Alto VM-Series firewalls on GCP. Manage firewall policies, NAT, routing, security zones, application controls, threat prevention, URL filtering, and logging. Design and manage Primary/Secondary or Active-Passive Palo Alto HA configurations, including synchronization and failover. Configure and troubleshoot IPsec Site-to-Site VPN and GlobalProtect VPN. Manage Palo Alto PAN-OS upgrades/updates, licensing, subscriptions, configuration backup/restore, and license-related issues. Perform firewall rule optimization, troubleshooting, and security monitoring. Cloudflare & Cloud Gateway Manage Cloudflare DNS, WAF, CDN, DDoS protection, SSL/TLS, Zero Trust, and traffic management. Design and manage secure cloud gateway / internet gateway architectures, including ingress/egress traffic, NAT, routing, and centralized security inspection. Integrate Cloudflare, Palo Alto, GCP Load Balancing, and application environments. Cloud Security Implement network security, segmentation, IAM, Zero Trust, encryption, firewall controls, and secure ingress/egress. Collaborate with Security and DevSecOps teams to implement security best practices and controls. Support security incidents, root-cause analysis, and remediation activities. Automation & Operations Automate infrastructure using Terraform, Ansible, and GitOps practices. Develop automation/scripts using Python, Bash, or PowerShell. Use Datadog and GCP/Palo Alto monitoring and logging for performance monitoring and troubleshooting. Maintain architecture diagrams, configuration standards, and operational documentation. Provide technical guidance and collaborate with Cloud, DevOps, Security, and Development teams. Required Skills & Experience 10+ years of overall experience in Network Engineering, Cloud Networking, Infrastructure, or Cloud Security. 5+ years of hands-on GCP networking experience. Strong hands-on experience with GKE networking, architecture, operations, and troubleshooting. Strong experience with Palo Alto Networks firewalls, preferably VM-Series on GCP. Experience with Palo Alto Primary/Secondary or Active-Passive HA. Strong experience with Palo Alto firewall policies, NAT, routing, security zones, and security profiles. Hands-on experience with IPsec VPN and GlobalProtect. Experience with Palo Alto licensing, subscriptions, PAN-OS upgrades/updates, and troubleshooting. Hands-on experience with Cloudflare DNS, WAF, CDN, DDoS, SSL/TLS, and Zero Trust. Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, IPsec, and HTTP/HTTPS. Experience with Terraform/IaC, Ansible, GitOps, and CI/CD. Scripting experience in Python, Bash, or PowerShell. Experience with Datadog and cloud monitoring/logging. Strong understanding of cloud security, network segmentation, IAM, Zero Trust, and DevSecOps. Experience with hybrid cloud and on-premises connectivity. Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or related field. Strong communication, analytical, troubleshooting, and problem-solving skills. Ability to work independently and provide technical leadership to engineering teams. Preferred Certifications Google Cloud Professional Cloud Network Engineer Google Cloud Professional Cloud Architect Palo Alto PCNSA / PCNSE or equivalent hands-on expertise. Key Technology Stack GCP | GKE | Palo Alto VM-Series | PAN-OS | GlobalProtect | Cloudflare | VPN | VPC | Cloud Router | Cloud NAT | Load Balancing | Terraform | Ansible | GitOps | Datadog | Python/Bash | DevSecOps Ideal Candidate A 10+ year senior cloud network/security professional with strong hands-on expertise in GCP + GKE Networking + Palo Alto VM-Series + Palo Alto HA + VPN + Cloudflare + Cloud Gateway + Security + Terraform, capable of independently handling enterprise cloud networking, security architecture, production troubleshooting, and automation.