Lead Platform Engineer

About the role

The Cloud Network Engineer plays a crucial role in designing, deploying, and operating large-scale, multi-account AWS and Azure network environments. This role supports mission-critical workloads, hybrid connectivity, global DNS services, and security-aligned network patterns that serve both internal customers and enterprise applications.

Responsibilities

• Implement scalable AWS and Azure network patterns including VPC and VNet architectures, Transit Gateway, Cloud WAN, Direct Connect, ExpressRoute, NAT gateways, IGWs, and multi-account network segmentation.
• Build and maintain DNS architectures including Route 53 Resolver, Resolver endpoints, profiles, and integration with enterprise DNS such as InfoBlox and F5 DNS for GSLB.
• Deploy and support NLB based architectures for DNS appliances, load balancers, and hybrid applications.
• Implement network security controls using cloud native and third-party platforms such as Palo Alto Cloud NGFW, Guardicore segmentation, WAFs, and PrivateLink.
• Engineer connectivity solutions between premises data centers and cloud using Direct Connect, VPN, SD WAN, and partner connectivity.
• Support IPAM workflows and CIDR allocation strategies across large multi-region environments.
• Troubleshoot routing, BGP, path selection, firewalls, and connectivity issues across hybrid estates.
• Develop Terraform modules for repeatable network patterns including TGW attachments, Route 53 rules, Resolver endpoints, VPC builds, and account onboarding.
• Build automation workflows using CI/CD pipelines, Git, Bitbucket, and policy guardrails to ensure version-controlled network deployments.
• Participate in building a Cloud Network Engineering Center of Excellence focused on governance, documentation, reference architectures, and pattern reuse.
• Provide Day 2 operational expertise for DNS appliances, cloud firewalls, GSLB, network proxies, monitoring, and hybrid connectivity.
• Act as escalation for enterprise networking teams managing over five thousand network devices across routers, switches, load balancers, monitoring systems, and cloud endpoints.
• Review risk assessments, change requests, and network designs for compliance and reliability.

Qualifications

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience
• Five or more years in network engineering with strong experience in AWS or Azure networking
• Expertise with routing and switching protocols including BGP
• Experience with VPC design, subnetting, network segmentation, NACLs, and security groups
• Practical experience with Terraform for infrastructure deployment
• Strong troubleshooting skills across hybrid environments
• Familiarity with DNS concepts including recursion, forwarding, authoritative zones, and GSLB
• AWS Certified Advanced Networking Specialty or equivalent
• Experience with InfoBlox, F5 GTM DNS, Palo Alto Cloud NGFW, and Guardicore segmentation
• Experience operating large scale environments with centralized IPAM and routing patterns
• Experience building CI/CD pipelines for network automation
• Strong documentation and communication skills for working with architecture and risk stakeholders
• Systems thinking and pattern-oriented mindset
• Comfortable driving clarity in ambiguous multi-team environments
• Customer obsessed approach to reliability and service ownership
• Strong sense of operational excellence and continuous improvement