Cloud Network Engineer

Responsibilities

• Design and implement cloud network architecture for pilot and production environments.
• Support hybrid connectivity between on-premise infrastructure and cloud environments.
• Develop cloud VPC/VNet designs, subnets, route tables, security groups, network ACLs, firewalls, gateways, and transit architectures.
• Implement segmentation strategies for multi-tenant systems, management networks, shared services, frontend access, backend storage, and application environments.
• Support cloud VPNs, private circuits, transit gateways, virtual WANs, cloud routers, and direct connectivity.
• Integrate cloud DNS, identity-aware access, certificate services, logging, and monitoring.
• Support cloud firewall policies, network inspection, egress control, ingress control, and zero-trust network principles.
• Work with DevOps engineers to codify cloud networking using Terraform, Ansible, or equivalent automation tools.
• Create cloud network diagrams, traffic flow diagrams, routing plans, and firewall rule matrices.
• Support test planning, validation, failover testing, and production readiness assessments.
• Provide recommendations for scalability, resilience, performance, security, and cost optimization.
• Participate in cloud architecture reviews and migration planning.
• Explain cloud network design decisions to architecture boards and leadership.
• Collaborate with network, security, DevOps, and system teams.
• Identify risks before implementation.
• Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements.
• Mentor junior staff and participate in architecture reviews.
• Create and deliver system status updates to customers and stakeholders.

Qualifications

• Experience with enterprise networking fundamentals including routing, switching, DNS, VPN, NAT, subnetting, segmentation, and firewalling.
• Experience with cloud networking constructs such as VPCs, VNets, subnets, route tables, gateways, peering, private endpoints, security groups, and cloud firewalls.
• Experience with hybrid connectivity patterns between on-premise networks and cloud environments.
• Experience with network security architecture including segmentation, inspection, access control, and least privilege.
• Experience with load balancing, reverse proxies, TLS termination, and application delivery concepts.
• Experience with cloud logging and network telemetry.
• Experience with high availability and disaster recovery concepts for cloud networks.
• Experience with cloud-native and third-party network security appliances.
• Experience with Infrastructure as Code for cloud network deployment.
• Experience with one or more major cloud providers (AWS, Azure, Google Cloud).
• Working knowledge of Terraform/HCL, Python, Bash or PowerShell, YAML and JSON, Cloud CLI tools such as AWS CLI, Azure CLI, or gcloud.
• Strong documentation and diagramming discipline.
• Attention to detail in routing, firewall rules, and security group configuration.
• Strong troubleshooting across on-premise and cloud boundaries.
• Ability to communicate clearly with technical and non-technical stakeholders.
• Self-starter with a strong sense of personal responsibility.
• At least 10 years of network engineering, cloud engineering, or infrastructure engineering experience.
• At least 3–5 years of hands-on cloud networking experience preferred.

Prior Experience

• Terraform, OpenTofu
• Ansible
• CloudFormation, AWS CDK, ARM, Bicep
• GitLab, GitHub Enterprise, Azure DevOps
• Palo Alto VM-Series, Fortinet FortiGate-VM, Cisco cloud security appliances
• Aviatrix, Alkira, Prosimo, or other cloud networking platforms
• Wireshark, tcpdump, cloud packet capture tools
• Elastic, Splunk, Grafana, Prometheus

Certifications

• AWS Advanced Networking Specialty
• AWS Solutions Architect
• Azure Network Engineer Associate
• Azure Solutions Architect Expert
• Google Professional Cloud Network Engineer
• Cisco CCNP Enterprise or CCNP Security
• CompTIA Security+
• CCSP

Education

Preferred in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field.

Clearance Requirements

Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).