About the RoleRedhorse Corporation has an immediate opportunity for a Cloud Network Engineer to support a government customer. The selected candidate will work with a high-performance team to develop, design, and integrate robust physical and virtual networks for our client's enterprise infrastructure. This role is critical in bridging the gap between legacy on-premises data centers and modern cloud environments in AWS and Azure. The Engineer will need to work well with a team, always exhibit excellent customer service skills, and be self-motivated seeking ways to improve the environment.
Key Responsibilities- Hybrid Cloud Architecture: Design and architect hybrid network solutions integrating on-premises data centers with AWS and Azure cloud environments.
- High Availability/Redundancy: Develop and implement high-availability and redundancy strategies, including failover, load balancing, and disaster recovery architectures in multi-region environments.
- AWS Services: Design and manage AWS networking and security services such as VPCs, Transit Gateway, Direct Connect, Site-to-Site and Client VPN, Route 53, Elastic Load Balancing, AWS Security Groups, AWS NACL's, and AWS Network Firewall.
- Azure Services: Design and manage Azure networking and security services including Virtual Networks (VNet), ExpressRoute, Azure VPN Gateway, Azure Load Balancer, Azure NSG's, and Azure Firewall.
- Legacy Infrastructure: Support and optimize on-premises infrastructure including Cisco NCS routers, Cisco Nexus switches using Cisco NX-OS and Cisco ACI, Forcepoint firewalls, and General Dynamics TACLANE devices
- Network Support: Monitor network performance, troubleshoot complex issues, and implement proactive improvements.
- Identity and Access: Collaborate with network, system and security teams to implement identity and access controls using RSA and Cisco ISE.
- Security Integration: Work closely with the Information Security Office to implement cloud security best practices, including AWS Security Groups, Azure Network Security Groups (NSGs), and Web Application Firewalls (WAF), ensuring solutions comply with Key Control Policies.
- Documentation: Develop and maintain architecture artifacts, Layer 1/2/3 detail designs, cloud network diagrams, sample configurations, and "how-to" documents for network administrators.
- Testing & Validation: Test/validate deployment of security patches, cloud firmware updates, and software upgrades in a lab environment before production rollout.
- Analysis: Conduct technical analyses of engineering documentation and installation plans pertinent to the design and checkout of complex communication systems.
- Support: Occasionally travel to remote CONUS; provide occasional support outside normal business hours for incident response and maintenance windows.
- Experience with Infrastructure as Code (IaC) using Terraform, Ansible, or CloudFormation to deploy network resources.
- Proficiency in Python or Bash for automating repetitive network tasks and API integration with Cisco ACI.
Required Experience/Clearance- Security Clearance: An active Top Secret (TS) clearance is required.
- Professional Experience: Minimum of five (5) years of experience in network or system administration within an IT organization.
- Cisco Networking: Demonstrated experience in the design, implementation, and maintenance of Cisco enterprise and data center networking.
- SDN Knowledge: Proficiency in configuring, maintaining, and troubleshooting Software-Defined Networking (SDN) solutions (Cisco ACI preferred).
- Cloud Integration: Proven experience with cloud services (AWS and Azure), specifically regarding integration, migration, and hybrid configuration.
- Troubleshooting: Ability to diagnose and resolve complex networking configuration issues involving firewalls, switches, and routers.
- Systems Support: Experience supporting Windows and Linux desktop and server operating systems in an enterprise data center context.
- Security Infrastructure: Experience securing the enterprise through the implementation of IT tools such as IDS, SIEM, and related security solutions.
- Communication: Strong interpersonal skills with the ability to work effectively in a team environment and provide high-level customer support.
Desired Skills- Certifications: CCNA and/or CCNP certifications are highly preferred.
- Automation Tooling: Advanced experience with Infrastructure as Code (IaC) using Terraform, Ansible, or CloudFormation.
- Programmability: Proficiency in Python or Bash for API integration with Cisco ACI and automation of repetitive tasks.
- Workload Integration: Experience integrating networking to support unified server workloads, including Cisco UCS and VoIP communication solutions.
