Bachelor's degree in Computer Science, IT, Engineering, or related field.
5+ years of network engineering experience, including cloud networking.
Hands-on experience with firewall policies in cloud-native or next-gen firewalls.
Experience with dedicated cloud connections and IPsec VPNs.
Strong knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
Experience with Zero Trust network architecture or segmentation.
Ability to pass federal background investigation.
Responsibilities
Design and implement hub-and-spoke network architectures across multiple cloud providers.
Provision and manage dedicated connections and VPNs for cloud services.
Configure BGP routing, route tables, and failover mechanisms.
Create and maintain firewall policies and network segmentation for various environments.
Implement Zero Trust network controls aligned with NIST standards.
Build network configurations as code using Terraform and manage changes via ServiceNow.
Monitor network performance with CSP-native tools and forward events to Splunk.
Troubleshoot connectivity and latency issues as part of 24/7 operations.
Document network designs and provide evidence for ATO packages.
Benefits
Collaborative work environment with cloud engineers and security specialists.
Opportunity to work on cutting-edge cloud technologies.
Engagement with federal customers and compliance with security standards.
Potential for professional development and certifications in cloud networking.
Full Job Description
Job Description
TechSur is seeking a Cloud Network Engineer to design and run the network that connects a federal customer's private cloud, data centers, and four public cloud providers. You will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that put Zero Trust principles into practice across AWS, Azure, Google Cloud, and Oracle Cloud.
You will work with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN. You will then keep that connectivity secure, observable, and resilient in production.
Key Responsibilities
Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services.
Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN.
Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions.
Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments.
Implement Zero Trust network controls (micro-segmentation, private endpoints, identity-aware access) aligned with NIST SP 800-207 and customer security standards.
Build network configurations as code with Terraform and track changes through ServiceNow change management.
Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk.
Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations.
Document network designs, runbooks, and diagrams, and provide evidence for ATO packages.
Qualifications
Required Qualifications
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider.
Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls.
Experience provisioning dedicated cloud connections (Direct Connect, ExpressRoute, Cloud Interconnect, or FastConnect) and IPsec VPNs.
Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
Experience implementing Zero Trust network architecture or segmentation.
Ability to obtain and maintain the background investigation required by the federal customer.
Preferred Qualifications
Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE.
AWS Certified Advanced Networking - Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer.
Networking experience across more than one of AWS, Azure, GCP, and OCI.
Experience with Terraform or Ansible for network automation.
Experience with multi-cloud network or Zero Trust platforms (e.g., Aviatrix, Zscaler, Palo Alto Prisma Access).
Experience in federal environments and with NIST SP 800-53 network controls.
