Senior Network and Cloud Security Engineer at Delinea in City

Job description

About Delinea: Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Learn more about Delinea on Delinea.com, LinkedIn, X, and YouTube. Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you. Apply today to help us achieve our mission. This position is hybrid in our office at Reforma. (Tue, Wed, Thu). Senior Network and Cloud Security Engineer Summary: Delinea’s Cybersecurity organization is seeking a Senior Network and Cloud Security Engineer with experience defining, validating, and continuously improving enterprise network and cloud security capabilities within a distributed security operations environment. This role owns the security controls, policies, and standards that protect Delinea’s corporate network and cloud infrastructure, spanning next-generation firewalls, network detection and response, zero trust network access, and cloud security posture across Azure and AWS, and partners closely with the IT and Cloud Engineering teams that own and configure the underlying platforms. The successful candidate will apply strong technical and engineering skills to design scalable, well-instrumented security solutions that identify and neutralize threats across on-premises, hybrid, and multi-cloud environments. This is a hybrid role that is based in Mexico City, Mexico and reports to the Senior Security Operations Manager with work hours of 9 AM - 6 PM Central Standard Time. What You’ll Do: · Define security requirements, policies, and standards for network security controls (next-generation firewalls, IDS/IPS, network detection and response, zero trust network access/SASE, VPN, DNS security, and network segmentation) across corporate offices, data centers, and cloud environments. · Design and continuously improve cloud security capabilities in Azure and AWS, owning security tooling such as cloud security posture management (CSPM), cloud workload protection, and cloud-native threat detection, and defining the requirements for secure network architecture (VNets/VPCs, NSGs/security groups, private connectivity) and identity and access hardening that Cloud Engineering implements. · Review and approve firewall rule requests, network and cloud architecture changes, and cloud configurations against security policy; identify misconfigurations and gaps and drive remediation with the teams that own the platforms. · Validate that implemented controls meet defined security requirements through continuous monitoring, configuration audits, and control testing; track exceptions and drive them to closure. · Build and maintain integrations between network and cloud telemetry and the SIEM; develop detection rules, automated playbooks, and response workflows for network and cloud-based threats. · Apply a detections-as-code and policy-as-code approach; version-controlled, peer-reviewed, and tuned against alert quality metri