Designing and Implementing a Secure Hybrid Cloud Network Architecture for Financial Institution

We are seeking an experienced network engineer to design and implement a secure hybrid cloud network architecture for our financial institution. The project involves migrating existing on-premise infrastructure to AWS while maintaining a secure connection between the two environments. The ideal candidate will have a deep understanding of network security principles, cloud networking concepts (VPC, Direct Connect, VPN), and experience with firewalls (e.g., Palo Alto Networks, Cisco ASA). The design must incorporate robust security measures to protect sensitive data and comply with regulatory requirements (e.g., PCI DSS, GDPR). Responsibilities include conducting a thorough network assessment, developing detailed design documentation, configuring network devices (routers, switches, firewalls), implementing security controls (e.g., intrusion detection/prevention systems, network segmentation), and providing ongoing support and maintenance. Experience with automation tools (e.g., Ansible, Terraform) is a plus. We need someone who can work independently and collaborate effectively with our existing IT team. Post-implementation support for 2 weeks will be required to monitor performance and address any initial issues that arise. We require a focus on high availability, redundancy, and scalability to accommodate future growth. The solution should integrate with our existing monitoring systems (e.g., Nagios, Zabbix). A key aspect will be the integration of our existing Active Directory infrastructure with both on-premise and cloud environments, ensuring seamless user authentication. We'll also need assistance documenting all processes and configurations for knowledge transfer.