Cloud Network Engineer

Responsibilities

• In-Depth knowledge and hands-on experience with major cloud platforms, such as Azure, OCI and GCP.
• Comprehensive knowledge of cloud security best practices and ability to implement security measures within cloud networks.
• Strong understanding of networking protocols and technologies, including TCP/IP, DNS, DHCP, VPN, BGP and OSPF.
• Strong understanding of Virtual Private Clouds (VPCs) and subnets to meet the organization’s performance and security requirements.
• Experience with software-defined networking (SDN) and virtual networking concepts.
• Experience with identity and access management (IAM) in cloud environments
• Experience with installation of various network devices and services (e.g., routers, firewalls, load balancers, VPN, QoS)
• Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations for any third-party network devices in cloud platforms.
• Work with the existing network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control in cloud platforms.
• Maintain network availability and reliability through monitoring performance and ensuring system availability.
• Trend system resource utilization and perform capacity planning.
• Provide Level-2/3 support and troubleshooting to resolve issues.

Requirements

• Must be a US Citizen with the ability to obtain a Public Trust clearance.
• Bachelor's degree and seven (7) or more years of related experience, or Master's and four (4) or more years of related experience.
• Strong experience working with Terraform.
• Need to have experience with AWS Security group deployment using Terraform.
• Experience with cloud or on-prem devices such as Cisco and Palo Alto firewalls.
• Working technical knowledge of TCP/IP networks and standards (IEEE 802.1).
• Must have experience with EKS Cluster.
• Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM).
• Experience with PaloAlto firewalls.
• Experience configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs.
• Strong knowledge and understanding of TCP/IP network technologies; DNS, DHCP, TFTP, NAT, and SSL.
• Participation in 24/7 on-call rotation is required for this role.