Cloud Network Engineer

Your essential job functions will include but may not be limited to: Design and implement cloud network architecture for pilot and production environments. Support hybrid connectivity between on-premise infrastructure and cloud environments. Develop cloud VPC/VNet designs, subnets, route tables, security groups, network ACLs, firewalls, gateways, and transit architectures. Implement segmentation strategies for multi-tenant systems, management networks, shared services, frontend access, backend storage, and application environments. Support cloud VPNs, private circuits, transit gateways, virtual WANs, cloud routers, and direct connectivity. Integrate cloud DNS, identity-aware access, certificate services, logging, and monitoring. Support cloud firewall policies, network inspection, egress control, ingress control, and zero-trust network principles. Work with DevOps engineers to codify cloud networking using Terraform, Ansible, or equivalent automation tools. Develop cloud network diagrams, traffic flow diagrams, routing plans, and firewall rule matrices. Support test planning, validation, failover testing, and production readiness assessments. Provide recommendations for scalability, resilience, performance, security, and cost optimization. Participate in cloud architecture reviews and migration planning. Explain cloud network design decisions to architecture boards and leadership. Work collaboratively with network, security, DevOps, and system teams. Identify risks before implementation. Participate in migration planning, cutover events, test events, and rollback planning. Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements. Mentor junior staff and participate in architecture reviews. Create and deliver system status updates to customers and stakeholders o Enterprise networking fundamentals including routing, switching, DNS, VPN, NAT, subnetting, segmentation, and firewalling. o Cloud networking constructs such as VPCs, VNets, subnets, route tables, gateways, peering, private endpoints, security groups, and cloud firewalls. o Hybrid connectivity patterns between on-premise networks and cloud environments. o Network security architecture including segmentation, inspection, access control, and least privilege. o Load balancing, reverse proxies, TLS termination, and application delivery concepts. o Cloud logging and network telemetry. o High availability and disaster recovery concepts for cloud networks. o Cloud-native and third-party network security appliances. o Infrastructure as Code for cloud network deployment. Experience with one or more major cloud providers. o AWS § VPC, Subnets, Route Tables § Security Groups, NACLs § Transit Gateway § Site-to-Site VPN § Direct Connect § Route 53 § Elastic Load Balancing § AWS Network Firewall § PrivateLink § CloudWatch, VPC Flow Logs § IAM and KMS basics o Microsoft Azure § VNets, Subnets, NSGs § Azure Firewall § Virtual WAN § VPN Gateway § ExpressRoute § Azure Load Balancer, Application Gateway § Private Link, Private Endpoints § Azure DNS § Network Watcher § Entra ID integration awareness o Google Cloud § VPC Networks § Cloud Router § Cloud VPN § Cloud Interconnect § Firewall Rules § Cloud Load Balancing § Private Service Connect § Cloud DNS § VPC Flow Logs o Terraform/HCL o Python o Bash or PowerShell o YAML and JSON o Cloud CLI tools such as AWS CLI, Azure CLI, or gcloud Strong documentation and diagramming discipline. Attention to detail in routing, firewall rules, and security group configuration. Strong troubleshooting across on-premise and cloud boundaries. Ability to communicate clearly with technical and non-technical stakeholders. Bachelor's degree in preferred in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field. AWS Advanced Networking Specialty AWS Solutions Architect Azure Network Engineer Associate Azure Solutions Architect Expert Google Professional Cloud Network...