Cloud Network Security Engineer

Salary: $162,000 - 200,000 per year Requirements: We are looking for someone with 5+ years of experience in cloud network engineering and security. We need hands-on experience with hybrid cloud connectivity and secure design patterns. We value strong analytical and problem-solving skills. We expect excellent communication and documentation abilities. We need strong collaboration skills and the ability to work effectively across teams. We require expertise in network security protocols such as IPSec, TLS, and MacSec, as well as encryption standards. We expect experience with cloud networking services including VPCs, VNets, subnets, and load balancers. We need proficiency with Infrastructure as Code tools and frameworks such as Terraform and Ansible. We value proficiency in AI tooling and innovation. We expect familiarity with version control tools such as Git, GitHub, and GitLab. We need experience with SIEM tools such as Splunk for monitoring. We require knowledge of compliance frameworks such as ISO 27001, SOC 2, and GDPR. We value experience with cloud-native container orchestration, network policies, Istio, and Calico. We expect strong knowledge of networking protocols such as BGP and OSPF. We need understanding of OCI container image packaging and runtime, Netconf-YANG, Linux, API programming, JSON, and XML. Preferred certifications include AWS Certified Security Specialty, Azure Security Engineer Associate, Certified Kubernetes Security Specialist (CKS), CISSP, or CCSP. Responsibilities: We design secure network architectures for hybrid and multi-cloud environments across AWS, Azure, and GCP. We architect resilient security solutions for containerized applications. We implement network segmentation, micro-segmentation, and zero-trust principles. We design end-to-end encrypted connectivity patterns. We build secure network architectures for containerized environments using OCI packaging and runtime. We create scalable, dynamic security patterns using tag- and identity-based attributes. We configure and manage cloud-native firewalls, security groups, network ACLs, and network security appliances. We deploy intrusion detection and prevention systems, along with threat monitoring tools. We monitor cloud network traffic for anomalies and potential breaches. We remediate findings from vulnerability assessments and penetration testing on cloud networks. We respond to and investigate cloud security incidents. We use Infrastructure as Code tools and CI/CD pipelines to support secure deployments. We automate security policy enforcement and configuration management. We write Python scripts to automate network tasks, build integrations, and manage workflows. We work closely with DevOps, Cloud Engineering, and Security Operations teams to deliver key projects. We provide technical guidance and documentation for security best practices. We help shape platform strategy, influence architectural direction, mentor engineers, and drive adoption of next-generation engineering practices. Technologies: AI API AWS Ansible Architect Azure CI/CD Cloud DevOps GCP Git GitHub GitLab Istio Support JSON Kubernetes Linux Network Python Security Splunk Terraform XML More: We are part of Aladdin Platform Engineering, the technology foundation behind BlackRocks Aladdin platform, a unified system connecting risk, portfolio management, trading, and operations for investors worldwide. Our mission-critical hosting platform enables engineers to build products and operators to run the platform at scale, while our teams collaborate across product, data, and engineering to deliver scalable infrastructure for clients globally. We also develop AI-first engineering capabilities to improve developer productivity and reduce friction across the development lifecycle. This role is based in New York, NY and offers a hybrid work model with at least four days in the office each week and one day working from home, along with a salary range of USD 162,000 to USD 200,000, annual discretionary bonus eligibility, and benefits including healthcare, leave, retirement support, tuition reimbursement, and Flexible Time Off. last updated 37 week of 2026