AWS Cloud Firewall SME

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.
Job Title: AWS Cloud Firewall SME.
Location: McLean, VA.
Job Description:

• Need an AWS Cloud Firewall Subject Matter Expert (SME) focused on the architecture, implementation, and central management of network security across cloud environments.

Core Responsibilities:

• Security Architecture & Design: Design and implement secure AWS network topologies, including VPC design, routing, and hybrid connectivity (VPN, Direct Connect).
• Centralized Firewall Management: Act as the primary expert for AWS Firewall Manager to centrally configure and manage rules for AWS WAF, AWS Network Firewall, Shield Advanced, and Security Groups across multiple accounts.
• Policy Implementation: Maintain and optimize rules for AWS Network Firewall and third-party firewalls (e.g., Palo Alto, Fortinet) to control ingress/egress traffic.
• Automation (DevSecOps): Develop and manage Infrastructure as Code (IaC) templates using Terraform or CloudFormation to automate firewall deployments and security governance policies.
• Compliance & Auditing: Enforce network security standards and compliance frameworks (e.g., NIST, CIS, PCI-DSS) by conducting periodic firewall rule audits and access reviews.
• Incident Support: Act as an SME during network-related security incidents, supporting SOC teams with packet analysis, firewall log investigation, and immediate containment actions.

Required Technical Skills:

• AWS Security Services: Deep expertise in AWS Network Firewall, Firewall Manager, WAF, Security Groups, NACLs, and AWS Shield.
• Cloud Networking: Advanced knowledge of VPCs, Transit Gateway, Route 53 Resolver DNS Firewall, and PrivateLink.
• Third-Party Expertise: experience with enterprise firewall platforms like Palo Alto Networks, Cisco ASA/Firepower, or Fortinet within AWS.
• Automation Tools: Proficiency in Terraform, CloudFormation, and scripting (Python, Bash, or PowerShell).
• Monitoring & Logging: Skilled in using AWS CloudWatch, CloudTrail, and Security Hub for centralized security monitoring.

Preferred Qualifications:

• Experience: Typically, 5 years in network engineering or cloud security, with at least 3 years specifically in cloud network architecture.

Certifications:

• AWS Certified Security – Specialty.
• AWS Certified Advanced Networking – Specialty.
• Vendor-specific certs like PCNSE (Palo Alto).

education:

• Bachelor’s degree in computer science, Information Technology, or a related field.

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.