Role Overview
We are seeking a Network & Security Engineer to lead secure, scalable, and compliant network design and implementation for a large-scale FinTech datacenter-to-GCP migration project. The role requires expertise in cloud networking, hybrid connectivity, F5 load balancers, and enterprise-grade security solutions, ensuring a seamless and secure migration of critical applications.
Key Responsibilities
Network Architecture & Design
· Design and implement secure network architecture in GCP (VPCs, subnets, segmentation)
· Manage hybrid connectivity between on-premises and GCP environments
· Configure and optimize load balancers (including F5)
· Implement DNS and traffic management strategies for migration
Security Implementation & Compliance
· Enforce security frameworks aligned with FinTech regulatory requirements
· Configure IAM policies, service accounts, RBAC in GCP
· Implement firewalls, encryption (at rest & in transit), and monitoring
· Support compliance validation (SOC 2, PCI DSS, ISO , etc.)
Connectivity & Migration
· Configure and manage site-to-site VPNs & IPSec tunnels
· Migrate network configurations for applications moving from Hyper-V to GCP
· Ensure secure connectivity for external APIs, third-party services
· Standardize networking across Dev/QA/Stage/Prod environments
Monitoring & Incident Response
· Implement security monitoring, vulnerability scanning, and SIEM integration
· Conduct risk assessments, incident response, and forensic investigations
· Generate security compliance reports and audit documentation
Required Skills & Experience
Networking
· 5+ years in network engineering & security roles
· Strong knowledge of TCP/IP, routing, VLANs, VPNs, and DNS
· Hands-on experience with GCP networking (VPC, Load Balancing, Cloud NAT)
· Expertise with F5 load balancers
Security
· 4+ years of cloud networking & security (preferably GCP)
· Proficiency in IAM, Security Command Center, Cloud Armor
· Experience with firewall management & vulnerability scanning (Qualys, Nessus, etc.)
· Familiarity with SIEM tools (Splunk preferred)
Tools & Automation
· Knowledge of Datadog, New Relic, Google Cloud Monitoring
· Scripting skills (Python, Bash, PowerShell)
· Infrastructure-as-Code (Terraform)
· Proficiency with Visio/Lucidchart for documentation
Preferred
· Experience in financial services / regulated environments
· Certifications (., CCNA, CCNP, GCP Security Engineer, Cloud Architect)
Project-Specific Deliverables
· Migration of F5 load balancer configurations to cloud
· Integration of golden images and hardened VM templates in GCP
· Configuration of Splunk log forwarding & monitoring
· Firewall, IAM, and compliance documentation
· Pre, during, and post-migration security validation & rollback planning
Success Metrics
· Zero security incidents during migration
· 100% compliance with FinTech security standards
· <30 min response time for critical incidents
· Accurate network & security documentation
Collaboration & Reporting
· Reports to: Technical Project Manager
· Works with: Solution Architect, DevOps Engineers, Client Security Teams
· Coordinates with: Compliance Officers, Auditors, Security Vendors