TechSur is seeking a Cloud Network Engineer to design and run the network that connects a federal customer's private cloud, data centers, and four public cloud providers. You will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that put Zero Trust principles into practice across AWS, Azure, Google Cloud, and Oracle Cloud.
You will work with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN. You will then keep that connectivity secure, observable, and resilient in production.
Key Responsibilities
- Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services.
- Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN.
- Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions.
- Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments.
- Implement Zero Trust network controls (micro-segmentation, private endpoints, identity-aware access) aligned with NIST SP 800-207 and customer security standards.
- Build network configurations as code with Terraform and track changes through ServiceNow change management.
- Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk.
- Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations.
- Document network designs, runbooks, and diagrams, and provide evidence for ATO packages.
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
- At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider.
- Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls.
- Experience provisioning dedicated cloud connections (Direct Connect, ExpressRoute, Cloud Interconnect, or FastConnect) and IPsec VPNs.
- Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
- Experience implementing Zero Trust network architecture or segmentation.
- Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
- Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE.
- AWS Certified Advanced Networking – Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer.
- Networking experience across more than one of AWS, Azure, GCP, and OCI.
- Experience with Terraform or Ansible for network automation.
- Experience with multi-cloud network or Zero Trust platforms (e.g., Aviatrix, Zscaler, Palo Alto Prisma Access).
- Experience in federal environments and with NIST SP 800-53 network controls.
- Prior support of a civilian federal agency.
All your information will be kept confidential according to EEO guidelines.