Senior Network and Cloud Security Engineer (Cybersecurity)

Location: Hybrid role based in Mexico City, Mexico, with office attendance on Tuesday, Wednesday, and Thursday. Working hours are 9 AM–6 PM Central Standard Time.

Company

hirify.global develops a cloud-native Identity Security Platform for securing human and machine identities across cloud infrastructure, traditional infrastructure, data, SaaS applications, and AI environments.

What you will do

• Define security requirements, policies, and standards for firewalls, IDS/IPS, network detection and response, zero trust network access/SASE, VPN, DNS security, and network segmentation.
• Design and improve cloud security capabilities across Azure and AWS, including CSPM, cloud workload protection, cloud-native threat detection, secure VNets/VPCs, NSGs/security groups, private connectivity, and identity hardening.
• Review firewall requests, network and cloud architecture changes, and cloud configurations; identify gaps and drive remediation with IT and Cloud Engineering.
• Validate controls through continuous monitoring, configuration audits, control testing, exception tracking, and remediation follow-up.
• Integrate network and cloud telemetry with the SIEM and develop detection rules, automated playbooks, response workflows, and version-controlled detections-as-code and policy-as-code.
• Evaluate and operationalize network and cloud security products, build proof-of-concept integrations, support incident response, and coordinate post-incident hardening.

Requirements

• Bachelor’s degree in a technical field or equivalent experience.
• 5+ years of hands-on experience in network security, cloud security, or security engineering.
• Enterprise-level experience defining, assessing, and governing network security controls, including next-generation firewalls, IDS/IPS, NDR, ZTNA/SASE, VPN, network segmentation, firewall policies, and network architectures.
• Hands-on experience securing Azure and/or AWS environments, including cloud networking, VNets/VPCs, NSGs/security groups, private endpoints, cloud identity and access management, and native cloud security services.
• Strong understanding of TCP/IP, routing, switching, DNS, TLS, load balancing, and their application to threat detection and prevention.
• Ability to translate security requirements into actionable standards and verify implementation across cross-functional teams.
• Proficiency in Python, PowerShell, or Bash for security tooling and automation.
• Proficient spoken and written English.

Nice to have

• Security or technical certifications such as CCNP Security, CCSP, AWS Certified Security–Specialty, Microsoft AZ-500, ISC2, GIAC, or CompTIA.
• Familiarity with Terraform, CloudFormation, Bicep, Azure DevOps, GitHub Actions, or similar infrastructure-as-code and CI/CD tooling, including security guardrails in pipelines.
• Experience with SIEM, SOAR, detection engineering, container and Kubernetes security, cloud workload protection, or CNAPP platforms.
• Experience with privileged access management, digital forensics, and penetration testing tools.
• Experience with GDPR, CCPA, SOC 2, ISO 27001, or NIST requirements.

Culture & Benefits

• Collaborative culture focused on innovation, respect, integrity, ownership, adaptability, and diverse perspectives.
• Meaningful work protecting human and machine identities for large organizations.
• Competitive salary, bonus program, healthcare insurance, pension or retirement matching, life insurance, employee assistance program, paid time off, and company holidays.
• Equal opportunity and affirmative action employer.

Hiring process

• Conditional offers require a comprehensive criminal background check and verification of education and employment.
• Publicly posted social media sites may be reviewed.