Senior Network and Cloud Security Engineer

Delinea’s Cybersecurity organization is seeking a Senior Network and Cloud Security Engineer with experience defining, validating, and continuously improving enterprise network and cloud security capabilities within a distributed security operations environment. This role owns the security controls, policies, and standards that protect Delinea’s corporate network and cloud infrastructure, spanning next-generation firewalls, network detection and response, zero trust network access, and cloud security posture across Azure and AWS, and partners closely with the IT and Cloud Engineering teams that own and configure the underlying platforms. The successful candidate will apply strong technical and engineering skills to design scalable, well-instrumented security solutions that identify and neutralize threats across on-premises, hybrid, and multi-cloud environments.

This is a hybrid role that is based in Mexico City, Mexico and reports to the Senior Security Operations Manager with work hours of 9 AM - 6 PM Central Standard Time.

· Define security requirements, policies, and standards for network security controls (next-generation firewalls, IDS/IPS, network detection and response, zero trust network access/SASE, VPN, DNS security, and network segmentation) across corporate offices, data centers, and cloud environments.

· Design and continuously improve cloud security capabilities in Azure and AWS, owning security tooling such as cloud security posture management (CSPM), cloud workload protection, and cloud-native threat detection, and defining the requirements for secure network architecture (VNets/VPCs, NSGs/security groups, private connectivity) and identity and access hardening that Cloud Engineering implements.

· Review and approve firewall rule requests, network and cloud architecture changes, and cloud configurations against security policy; identify misconfigurations and gaps and drive remediation with the teams that own the platforms.

· Validate that implemented controls meet defined security requirements through continuous monitoring, configuration audits, and control testing; track exceptions and drive them to closure.

· Build and maintain integrations between network and cloud telemetry and the SIEM; develop detection rules, automated playbooks, and response workflows for network and cloud-based threats.

· Apply a detections-as-code and policy-as-code approach; version-controlled, peer-reviewed, and tuned against alert quality metrics.

· Collaborate with cross-functional teams to embed network and cloud security controls into business processes and the change management lifecycle.

· Research, evaluate, and operationalize network and cloud security products and services (including AI enabled platforms), building proof-of-concept integrations, providing recommendations or deferrals on adoption, and driving adoption across the security stack.

· Participate in incident response for network and cloud security events, providing subject-matter expertise, recommending containment actions, and coordinating post-incident hardening with platform owners.

· Bachelor’s degree in a technical field (or equivalent experience)

· 5+ years of hands-on experience in network security, cloud security, or security engineering role

· Demonstrated working experience at the enterprise level defining, assessing, and governing network security controls such as next-generation firewalls, IDS/IPS, NDR, ZTNA/SASE, VPN, and network segmentation, including reviewing firewall policies and network architectures.

· Hands-on experience securing Azure and/or AWS environments, including cloud networking (VNets/VPCs, NSGs/security groups, private endpoints), cloud identity and access management, and native cloud security services.

· Strong understanding of networking fundamentals (TCP/IP, routing, switching, DNS, TLS, load balancing) and how they apply to detecting and preventing threats.

· Ability to translate security requirements into clear, actionable standards for cross-functional teams and verify their implementation.

· Proficiency in scripting and automation languages (Python, PowerShell, or Bash) for developing security tools and automating repetitive tasks.

· Proficient in spoken and written English.

· Security and/or technical industry certifications (CCNP Security, CCSP, AWS Certified Security - Specialty, Microsoft AZ-500, ISC2, GIAC, CompTIA)

· Familiarity with infrastructure-as-code and CI/CD tooling (Terraform, CloudFormation, Bicep, Azure DevOps, GitHub Actions or similar) and defining security guardrails within pipelines.

· Experience with SIEM, SOAR, and detection engineering for network and cloud telemetry.

· Experience with container and Kubernetes security, cloud workload protection, and CNAPP platforms.

· Experience with privileged access management, digital forensic, and penetration testing tools.

· Experience working within common regulatory and statutory requirements (GDPR, CCPA, SOC2, ISO 27001, NIST).

• Spirited - We bring energy and passion to everything we do

• Trust - We act with integrity and deliver on our commitments

• Respect - We listen, value different perspectives, and work as one team

• Ownership - We take initiative and follow through

• Nimble - We adapt quickly in a fast-changing environment

• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.