Information Technology - DevOps Engineer (Cloud Engineer)

We are seeking an experienced Senior Network Engineer to design, automate, secure, and modernize enterprise network infrastructure across on-premises data centers, private cloud, AWS, and Microsoft Azure.

The ideal candidate will have strong expertise in enterprise routing and switching, hybrid cloud networking, Terraform automation, micro-segmentation, Zero Trust, network resiliency, disaster recovery, and network observability.

This role will work closely with Cloud Engineering, Cybersecurity, Infrastructure, SRE, and Application teams to build highly available, secure, scalable, and automated enterprise networking solutions., * Design, implement, and support highly available enterprise network infrastructure across on-premises, private cloud, AWS, and Azure environments.

• Engineer resilient Layer 2 and Layer 3 network architectures using BGP, OSPF, VXLAN/EVPN, routing, switching, and SDN technologies.
• Build Infrastructure as Code solutions using Terraform and develop reusable network automation modules.
• Automate network provisioning, configuration management, validation, compliance verification, drift detection, and operational reporting.
• Integrate infrastructure automation into GitHub, GitLab, Azure DevOps, or similar CI/CD pipelines.
• Develop automation using Python, PowerShell, Bash, REST APIs, and Terraform.
• Design secure network isolation patterns for production, non-production, management, disaster recovery, and cyber recovery environments.
• Architect air-gapped networks, secure enclaves, IRE environments, and isolated recovery networks.
• Design and implement micro-segmentation using VMware NSX, Illumio, Cisco Secure Workload, AWS Security Groups, Azure NSGs, and Network ACLs.
• Implement Zero Trust networking, least-privilege access, East-West traffic controls, and application-aware security policies.
• Engineer AWS networking solutions using VPCs, Transit Gateway, Direct Connect, PrivateLink, Route Tables, and Network Firewall.
• Engineer Azure networking solutions using VNets, ExpressRoute, Virtual WAN, Azure Firewall, NSGs, Application Gateway, and Load Balancer.
• Partner with Cybersecurity teams on firewall architecture, IDS/IPS, DDoS protection, secure DNS, encryption, certificates, and network access controls.
• Design network architectures supporting High Availability, Disaster Recovery, multi-region resiliency, and automated failover.
• Implement enterprise network monitoring and observability using ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus, and cloud-native monitoring platforms.
• Build dashboards, KPIs, health checks, and automated alerts to improve proactive network operations.
• Troubleshoot complex network, connectivity, routing, performance, security, and cloud networking issues.
• Drive automation-first engineering practices to reduce manual network administration and improve operational reliability.

9+ years of overall Network Engineering experience, including:

• 5+ years supporting hybrid cloud networking across on-premises, private cloud, AWS, and Azure.
• 3+ years of hands-on Infrastructure as Code experience using Terraform., * Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent professional experience., * Strong enterprise network engineering experience with Routing, Switching, BGP, OSPF, VXLAN/EVPN, and SDN.
• 5+ years of experience with hybrid cloud networking across on-premises, private cloud, AWS, and Azure.
• Experience designing network isolation, secure enclaves, air-gapped environments, Isolated Recovery Environments (IRE), and cyber/disaster recovery networks.
• Strong experience with micro-segmentation using VMware NSX, Illumio, Cisco Secure Workload, AWS Security Groups, Azure NSGs, or similar technologies.
• Strong understanding of Zero Trust networking and least-privilege access models.
• 3+ years of hands-on experience with Terraform, including reusable modules and standardized Infrastructure as Code patterns.
• Strong scripting and automation experience using Python, PowerShell, or Bash.
• Experience automating network provisioning, configuration validation, compliance checks, drift detection, monitoring, and reporting.
• Experience integrating infrastructure automation with Git-based CI/CD pipelines.

AWS Networking

Hands-on experience with:

• VPC
• Transit Gateway
• Direct Connect
• Route Tables
• PrivateLink
• AWS Network Firewall
• Security Groups
• Network ACLs
• Multi-region networking and failover

Azure Networking

Hands-on experience with:

• Virtual Networks (VNets)
• ExpressRoute
• Azure Virtual WAN
• Azure Firewall
• Network Security Groups (NSGs)
• Application Gateway
• Azure Load Balancer
• Hybrid and multi-region connectivity

Network Security

Strong experience with:

• Firewall architecture
• IDS/IPS
• Network Access Control
• DDoS protection
• Secure DNS
• Certificate management
• Encryption in transit
• Secure remote connectivity
• Zero Trust architectures
• East-West traffic control
• Dynamic security policy enforcement

High Availability & Resiliency

Experience designing and supporting:

• High Availability architectures
• Disaster Recovery networking
• Cyber Recovery networking
• Active-active and active-passive architectures
• Multi-region cloud deployments
• Automated failover
• Resilient routing
• Critical application recovery
• Secure recovery network architectures

Monitoring & Observability

Experience with one or more of the following:

• ThousandEyes
• SolarWinds
• Dynatrace
• Splunk
• Grafana
• Prometheus
• AWS/Azure native monitoring tools

Must have experience developing:

• Network monitoring dashboards
• Operational KPIs
• Performance and availability metrics
• Proactive monitoring
• Automated alerting, * Experience working within banking, financial services, insurance, or another highly regulated industry.
• Kubernetes or OpenShift networking.
• VMware NSX or Cisco ACI.
• GitHub Actions, GitLab CI/CD, or Azure DevOps.
• Disaster Recovery and Cyber Recovery networking.
• Infrastructure as Code governance.
• Policy as Code.
• Immutable infrastructure.
• Enterprise-scale network architecture and modernization experience., * VMware VCP-NV
• Palo Alto PCNSE
• CISSP