Aviatrix Engineer- Cloud Network Security Consultant

Overview

Remote
Hybrid
Accepts corp to corp applications
Contract - W2
Contract - Independent
Contract - 12

Skills

AWS
AZURE
GCP
PAN
AVIATRIX

Job Details

Aviatrix Engineer- Cloud Network Security Consultant
Remote PST time zone
Skills: Aviatrix, PAN, AWS, Azure, and Google Cloud Platform.

Experience designing and implementing Aviatrix Transit Network (including CoPilot, Spoke, and FireNet) in production environments.

About the Role

Rubrik is seeking a highly skilled Cloud Network Security Consultant to lead the deployment and configuration of multiple virtual firewalls, while also supporting application separation between production and non-production environments. The ideal candidate will help design a scalable, cost-efficient, and highly available solution capable of supporting up to 40TB/sec aggregate traffic across AWS, Azure, and Google Cloud Platform.

This role requires deep expertise in Palo Alto Networks (PAN) VM-Series with Flex licensing, Aviatrix-based cloud networking architectures, and strong understanding of cloud-native design patterns for security, performance, and resilience.

Key Responsibilities

Analyze and balance traffic performance, cost optimization, and high availability requirements for a multi-cloud environment with very high data throughput (40TB/sec).
Evaluate and present trade-offs between Aviatrix and Palo Alto Flex VM architectures, including technical, operational, and cost implications.
Lead the deployment and configuration of multiple PAN VM-Series firewalls using Flex licensing models.
Design and advise on application separation strategies between production and non-production environments using firewalls, route segmentation, and policy-based control.
Implement and optimize Aviatrix-based cloud network backbone across AWS, Azure, and Google Cloud Platform.
Assist internal teams with PoC deployments, performance testing, and integration strategies.
Document the recommended architecture, deployment plans, and operational guidance.

Required Qualifications

  • 5+ years of experience in cloud network engineering or security architecture.
  • Proven track record deploying PAN VM-Series Firewalls managed by Panorama using Flex licensing models.
  • Experience designing and implementing Aviatrix Transit Network (including CoPilot, Spoke, and FireNet) in production environments.
  • Deep knowledge of multi-cloud networking concepts, including:
  • Inter-region and inter-cloud routing
  • AWS cloud WAN, Google Cloud Platform NCC, Azure virtual WAN design & cost modeling expertise
  • Encryption, segmentation, and policy enforcement
  • High availability and failover strategies
  • Strong understanding of cloud cost modeling, especially around network egress, firewall licensing, and performance tiers.
  • Experience with Terraform, Python, or other automation tools is a strong plus.
  • Excellent communication skills to collaborate across security, infrastructure, and DevOps teams.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.