Cloud Network Engineer

As a Network Cloud Engineer, you will be a critical enabler of cloud transformation journeys for financial services clients. With a specialized focus on designing, implementing, and managing complex network architectures across multi-cloud environments (Amazon Web Services [AWS] and Google Cloud Platform [GCP]), you will seamlessly integrate these modern platforms with clients’ on-premises infrastructure. You will focus on building, automating, and optimizing the foundational cloud network infrastructure and services that empower developers to innovate rapidly and securely. In this client-facing technical role, you will embody a “you build it, you run it” philosophy, designing scalable, resilient, and secure cloud network platforms to ensure operational excellence across enterprise ecosystems.

• Multi-Cloud Network Architecture: Design, implement, and manage advanced network architectures across AWS and GCP, including Virtual Private Cloud (VPC) and Virtual Network (VNet) design, subnetting, routing, Internet Protocol (IP) addressing schemes, and strict network segmentation.
• Hybrid Cloud Connectivity: Establish and maintain robust, high-performance, and secure connectivity between on-premise data centers and public cloud environments using technologies such as AWS Direct Connect, Google Cloud Interconnect, Virtual Private Networks (VPNs), and Software-Defined Wide Area Network (SD-WAN) integration.
• Network as Code (NaC) & IaC: Develop, maintain, and optimize cloud network infrastructure using Infrastructure as Code (IaC) tools such as Terraform, AWS CloudFormation, and GCP Deployment Manager. Create reusable modules and blueprints for standardized network deployments.
• Advanced Network Services: Configure and manage critical network services including Domain Name System (DNS) routing (Route 53, Cloud DNS), Load Balancing (Application Load Balancer [ALB], Network Load Balancer [NLB], Cloud Load Balancing), Application Programming Interface (API) Gateways, and Content Delivery Networks (CDNs).
• Network Automation & Orchestration: Automate the provisioning, configuration, and management of cloud network resources and services. Develop scripts and tools utilizing Python, Go, or Bash to streamline network operations, ensure consistency, and improve operational efficiency.
• Site Reliability Engineering (SRE) for Networks: Take ownership of the reliability, performance, and availability of cloud network platforms. Implement robust network monitoring, alerting, and logging solutions, and participate in on-call rotations to ensure rapid incident response for network-related issues.
• Network Security Implementation: Enforce network security best practices, including Network Access Control Lists (NACLs), security groups, cloud firewalls (AWS Web Application Firewall [WAF], GCP Firewall Rules), and network intrusion detection/prevention systems to ensure strict regulatory compliance.

• Documentation & Knowledge Sharing: Create and maintain comprehensive documentation for cloud network architectures, configurations, and operational procedures. Mentor junior engineers and contribute to knowledge sharing within cross-functional delivery teams.
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others
• Communicate regularly with Engagement Managers (Directors), project team members, and representatives from various functional and / or technical teams, including escalating any matters that require additional attention and consideration from engagement management, Required
• 3+ years of dedicated professional experience in network engineering, with a strong focus on public cloud services adoption at scale.
• Multi-Cloud Engineering Expertise: Expert-level understanding of AWS and GCP, specifically regarding internet application hosting, network segmentation, packet mirroring, and high availability/resiliency.
• B2B & Hybrid Connectivity: Strong experience with Business-to-Business (B2B) connectivity patterns, third-party architecture integrations, AWS PrivateLink, Google Cloud Private Service Connect, and hybrid cloud connectivity solutions (Direct Connect, Cloud Interconnect, VPNs).
• Core Networking Principles: Deep knowledge of Transmission Control Protocol/Internet Protocol (TCP/IP), routing protocols (Border Gateway Protocol [BGP]), firewalls, and network security principles.
• IaC & CI/CD Hands-on Expertise: Demonstrable experience building Continuous Integration/Continuous Deployment (CI/CD) pipelines utilizing Terraform, Harness, Tekton, or Jenkins.
• Test Automation & Programming: Proficiency in Python and Go, with practical experience using test automation frameworks such as Terratest, Cucumber, Pytest-BDD, AWS Fault Injection Simulator (FIS), or Chaos Mesh.
• Agile & DevOps Mindset: Strong familiarity with Agile development, DevOps, and SRE practices. Demonstrated adaptability, strategic thinking, and exceptional teamwork skills to translate complex requirements into consistent service offerings.
• Bachelor’s or master’s degree in computer science, Information Technology, Network Engineering, or a related technical discipline, and/or equivalent professional experience.
• Limited immigration sponsorship may be available
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve

Preferred

• Cloud Network Certifications: Active public cloud provider network-specific certifications, such as the AWS Certified Advanced Networking Specialty or the Google Cloud Professional Network Engineer.
• Advanced Security Tooling: Experience with advanced network security tools such as Distributed Denial of Service (DDoS) protection mechanisms and sophisticated network intrusion detection/prevention systems.
• SDN & Container Networking: Familiarity with network virtualization and Software-Defined Networking (SDN) concepts. Experience with container networking, including Kubernetes Container Network Interface (CNI) and service mesh implementations.
• FSI Compliance Knowledge: Strong working knowledge of compliance frameworks relevant to financial services, such as the Payment Card Industry Data Security Standard (PCI DSS), National Institute of Standards and Technology (NIST), and International Organization for Standardization (ISO) 27001.

This position is aligned with the Project Delivery Model. To view the associated benefit package, please reference this document USBenefitsJourneyProjectandCenterTAM

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com.

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.

Professional development

From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.

Qualified applicants with criminal histories, including arrest or conviction records, will be considered for employment in accordance with the requirements of applicable state and local laws, including the Los Angeles County Fair Chance Ordinance for Employers, City of Los Angeles’s Fair Chance Initiative for Hiring Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. See notices of various fair chance hiring and ban-the-box laws where available. Fair Chance Hiring and Ban-the-Box Notices - Deloitte US Careers

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.