Senior Network and Cloud Security Engineer

About Delinea:
Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Learn more about Delinea on Delinea.com, LinkedIn, X, and YouTube.

Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you.
 

Apply today to help us achieve our mission.

This position is hybrid in our office at Reforma. (Tue, Wed, Thu).

Senior Network and Cloud Security Engineer Summary:

Delinea’s Cybersecurity organization is seeking a Senior Network and Cloud Security Engineer with experience defining, validating, and continuously improving enterprise network and cloud security capabilities within a distributed security operations environment. This role owns the security controls, policies, and standards that protect Delinea’s corporate network and cloud infrastructure, spanning next-generation firewalls, network detection and response, zero trust network access, and cloud security posture across Azure and AWS, and partners closely with the IT and Cloud Engineering teams that own and configure the underlying platforms. The successful candidate will apply strong technical and engineering skills to design scalable, well-instrumented security solutions that identify and neutralize threats across on-premises, hybrid, and multi-cloud environments.

This is a hybrid role that is based in Mexico City, Mexico and reports to the Senior Security Operations Manager with work hours of 9 AM - 6 PM Central Standard Time.

What You’ll Do:

· Define security requirements, policies, and standards for network security controls (next-generation firewalls, IDS/IPS, network detection and response, zero trust network access/SASE, VPN, DNS security, and network segmentation) across corporate offices, data centers, and cloud environments.

· Design and continuously improve cloud security capabilities in Azure and AWS, owning security tooling such as cloud security posture management (CSPM), cloud workload protection, and cloud-native threat detection, and defining the requirements for secure network architecture (VNets/VPCs, NSGs/security groups, private connectivity) and identity and access hardening that Cloud Engineering implements.

· Review and approve firewall rule requests, network and cloud architecture changes, and cloud configurations against security policy; identify misconfigurations and gaps and drive remediation with the teams that own the platforms.

· Validate that implemented controls meet defined security requirements through continuous monitoring, configuration audits, and control testing; track exceptions and drive them to closure.

· Build and maintain integrations between network and cloud telemetry and the SIEM; develop detection rules, automated playbooks, and response workflows for network and cloud-based threats.

· Apply a detections-as-code and policy-as-code approach; version-controlled, peer-reviewed, and tuned against alert quality metrics.

· Collaborate with cross-functional teams to embed network and cloud security controls into business processes and the change management lifecycle.

· Research, evaluate, and operationalize network and cloud security products and services (including AI enabled platforms), building proof-of-concept integrations, providing recommendations or deferrals on adoption, and driving adoption across the security stack.

· Participate in incident response for network and cloud security events, providing subject-matter expertise, recommending containment actions, and coordinating post-incident hardening with platform owners.

What You’ll Need:

· Bachelor’s degree in a technical field (or equivalent experience)

· 5+ years of hands-on experience in network security, cloud security, or security engineering role

· Demonstrated working experience at the enterprise level defining, assessing, and governing network security controls such as next-generation firewalls, IDS/IPS, NDR, ZTNA/SASE, VPN, and network segmentation, including reviewing firewall policies and network architectures.

· Hands-on experience securing Azure and/or AWS environments, including cloud networking (VNets/VPCs, NSGs/security groups, private endpoints), cloud identity and access management, and native cloud security services.

· Strong understanding of networking fundamentals (TCP/IP, routing, switching, DNS, TLS, load balancing) and how they apply to detecting and preventing threats.

· Ability to translate security requirements into clear, actionable standards for cross-functional teams and verify their implementation.

· Proficiency in scripting and automation languages (Python, PowerShell, or Bash) for developing security tools and automating repetitive tasks.

· Proficient in spoken and written English.

We’d Love to See:

· Security and/or technical industry certifications (CCNP Security, CCSP, AWS Certified Security - Specialty, Microsoft AZ-500, ISC2, GIAC, CompTIA)

· Familiarity with infrastructure-as-code and CI/CD tooling (Terraform, CloudFormation, Bicep, Azure DevOps, GitHub Actions or similar) and defining security guardrails within pipelines.

· Experience with SIEM, SOAR, and detection engineering for network and cloud telemetry.

· Experience with container and Kubernetes security, cloud workload protection, and CNAPP platforms.

· Experience with privileged access management, digital forensic, and penetration testing tools.

· Experience working within common regulatory and statutory requirements (GDPR, CCPA, SOC2, ISO 27001, NIST).

Why work at Delinea?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.

• We invest in people who are smart, self-motivated, and collaborative.

• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do

• Trust - We act with integrity and deliver on our commitments

• Respect - We listen, value different perspectives, and work as one team

• Ownership - We take initiative and follow through

• Nimble - We adapt quickly in a fast-changing environment

• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.

Department: MISC