Senior Network and Cloud Security Engineer

📋 Job Overview

This is a hybrid role that is based in Mexico City, Mexico and reports to the Senior Security Operations Manager with work hours of 9 AM - 6 PM Central Standard Time. Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI.

🏢 About Delinea

Delinea is a pioneer in securing human and machine identities through intelligent, centralized authorization, empowering organizations to seamlessly govern their interactions across the modern enterprise. Leveraging AI-powered intelligence, Delinea’s leading cloud-native Identity Security Platform applies context throughout the entire identity lifecycle – across cloud and traditional infrastructure, data, SaaS applications, and AI. It is the only platform that enables you to discover all identities – including workforce, IT administrator, developers, and machines – assign appropriate access levels, detect irregularities, and respond to threats in real-time. With deployment in weeks, not months, 90% fewer resources to manage than the nearest competitor, and a 99.995% uptime, Delinea delivers robust security and operational efficiency without compromise. Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness.

🎯 The Role

Delinea’s Cybersecurity organization is seeking a Senior Network and Cloud Security Engineer with experience defining, validating, and continuously improving enterprise network and cloud security capabilities within a distributed security operations environment. This role owns the security controls, policies, and standards that protect Delinea’s corporate network and cloud infrastructure, spanning next-generation firewalls, network detection and response, zero trust network access, and cloud security posture across Azure and AWS, and partners closely with the IT and Cloud Engineering teams that own and configure the underlying platforms. The successful candidate will apply strong technical and engineering skills to design scalable, well-instrumented security solutions that identify and neutralize threats across on-premises, hybrid, and multi-cloud environments.

✅ Key Responsibilities

• Define security requirements, policies, and standards for network security controls (next-generation firewalls, IDS/IPS, network detection and response, zero trust network access/SASE, VPN, DNS security, and network segmentation) across corporate offices, data centers, and cloud environments.
• Design and continuously improve cloud security capabilities in Azure and AWS, owning security tooling such as cloud security posture management (CSPM), cloud workload protection, and cloud-native threat detection, and defining the requirements for secure network architecture (VNets/VPCs, NSGs/security groups, private connectivity) and identity and access hardening that Cloud Engineering implements.
• Review and approve firewall rule requests, network and cloud architecture changes, and cloud configurations against security policy; identify misconfigurations and gaps and drive remediation with the teams that own the platforms.
• Validate that implemented controls meet defined security requirements through continuous monitoring, configuration audits, and control testing; track exceptions and drive them to closure.
• Build and maintain integrations between network and cloud telemetry and the SIEM; develop detection rules, automated playbooks, and response workflows for network and cloud-based threats.
• Apply a detections-as-code and policy-as-code approach; version-controlled, peer-reviewed, and tuned against alert quality metrics.
• Collaborate with cross-functional teams to embed network and cloud security controls into business processes and the change management lifecycle.
• Research, evaluate, and operationalize network and cloud security products and services (including AI enabled platforms), building proof-of-concept integrations, providing recommendations or deferrals on adoption, and driving adoption across the security stack.
• Participate in incident response for network and cloud security events, providing subject-matter expertise, recommending containment actions, and coordinating post-incident hardening with platform owners.

📌 Required Qualifications

• Bachelor’s degree in a technical field (or equivalent experience)
• 5+ years of hands-on experience in network security, cloud security, or security engineering role
• Demonstrated working experience at the enterprise level defining, assessing, and governing network security controls such as next-generation firewalls, IDS/IPS, NDR, ZTNA/SASE, VPN, and network segmentation, including reviewing firewall policies and network architectures.
• Hands-on experience securing Azure and/or AWS environments, including cloud networking (VNets/VPCs, NSGs/security groups, private endpoints), cloud identity and access management, and native cloud security services.
• Strong understanding of networking fundamentals (TCP/IP, routing, switching, DNS, TLS, load balancing) and how they apply to detecting and preventing threats.
• Ability to translate security requirements into clear, actionable standards for cross-functional teams and verify their implementation.
• Proficiency in scripting and automation languages (Python, PowerShell, or Bash) for developing security tools and automating repetitive tasks.
• Proficient in spoken and written English.

⭐ Desirable Experience

• Security and/or technical industry certifications (CCNP Security, CISSP, CISM, etc.)

🎁 Benefits

Competitive

🛂 Visa & Eligibility

Not specified