Cloud Engineer

Senior GCP Cloud Network Engineer (Palo Alto Firewalls)Employment Type: ContractJob Site: RemotePay Rate Range: $85/hrDuration: 3 Months | Extension EligibleBenefitsMedical, Dental, and Vision insurance, 401k, sick leave, and employee assistance program. Depending on your package selection, Averro offers PTO, paid holidays, and legal insurance.Role & ResponsibilitiesWe are seeking a Senior GCP Cloud Network Engineer with strong hands-on expertise in Google Cloud Platform networking and Palo Alto firewall technologies deployed within GCP environments. This is a cloud-first, delivery-focused role supporting enterprise-scale network architecture, cloud connectivity, and security integration across GCP and hybrid environments. The ideal candidate thinks in GCP constructs first, VPCs, shared VPCs, Cloud Interconnect, Cloud NAT, and GCP-native routing and brings Palo Alto NGFW experience as a complementary security layer within that platform.Design, build, and maintain GCP network architectures including VPCs, Shared VPCs, VPC peering, Cloud Interconnect, Cloud NAT, Cloud Router, and firewall rulesDeploy and manage Palo Alto Networks NGFW within GCP environments as the primary network security control layerConfigure and optimize Palo Alto technologies within GCP — NGFW, Panorama, Strata Cloud Manager, Prisma Access, and GlobalProtectImplement Zero Trust Network Access (ZTNA) principles across GCP and hybrid cloud environmentsDesign and execute cloud network segmentation, secure remote access, and cloud-edge security solutionsExecute migrations from legacy on-prem or hybrid network stacks to GCP-native cloud architecturesImplement network security controls including URL filtering, IDS/IPS, threat prevention, and VPN/remote access within GCPTroubleshoot complex cloud networking and security issues across GCP, hybrid, and on-prem environmentsProduce and maintain HLD/LLD documentation, migration plans, and operational runbooksEnsure cloud network designs align with compliance frameworks — NIST, CIS, ISO 27001, SOC 2Collaborate with Cloud, Network Engineering, SOC, and Architecture teamsEssential Qualifications7+ years of hands-on experience in cloud network and security engineering rolesStrong GCP networking expertise including VPCs, Shared VPCs, VPC peering, Cloud Interconnect, Cloud NAT, Cloud Router, firewall rules, and GCP-native network architecture; this is the primary requirementProven experience deploying and managing Palo Alto Networks NGFW within GCP environmentsDeep expertise with Palo Alto Networks products — NGFW, Panorama/Strata Cloud Manager, Prisma Access, GlobalProtectStrong understanding of Zero Trust architecture (ZTNA), cloud network segmentation, and firewall policy optimizationExperience with cloud routing protocols, BGP, and application-layer security in GCPProficiency with packet analysis and cloud network troubleshooting toolsStrong documentation and communication skills — able to produce HLD/LLD and present to technical and business stakeholdersBonus QualificationsGoogle Cloud certifications — Professional Cloud Network Engineer or Professional Cloud ArchitectPalo Alto certifications — PCNSE, PCCET, or Prisma AccessExperience with GCP-native security tools — Cloud Armor, Security Command Center, Cloud IDSBroader multi-cloud networking experience (Azure vNet, AWS VPC) alongside GCPExperience with SASE/SD-WAN, automation, and SIEM/SOAR integrationWhy Averro?Averro is a Veteran-Owned organization dedicated to delivering innovative talent solutions, business consulting, and technology services that propel businesses and careers forward. We live by our ethos: Be Curious | Build Trust | Empower Each Other. These values show in our commitment to client satisfaction, timely support, and unmatched consultant care. Our Aim – Your Ascent.Averro is an equal opportunity employer, and we are committed to diversity, equity, and inclusion in the workplace. All qualified applicants will receive consideration for employment, regardless of criminal histories, consistent with legal obligations. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.View our privacy policy here: https://www.averro.com/legal/privacy-policy