Cloud Network Engineer

Designs, deploys, and troubleshoots enterprise cloud and hybrid network infrastructure across Azure, OpenShift, corporate offices, and security platforms. Administers FortiGate, FortiSASE, Cisco Meraki, Cloudflare, DNS, load balancing, ingress controllers, and Kubernetes networking. Partners with application, security, and cloud teams on deployments and incident response, creates network documentation, manages monitoring and alerting, and performs changes under established procedures., * Architect, deploy, and troubleshoot Azure network topologies including VNETs, peering, user-defined routing, Private Link/Private Endpoints, Virtual WAN, Application Gateway, Azure Load Balancer, NSGs, and hybrid connectivity via ExpressRoute and IPSec.

• Administer and troubleshoot FortiGate firewalls - policy design, IPS, web filtering, SSL inspection, SD-WAN, and Layer 3/4 segmentation - across cloud and on-premise environments.
• Support and administer Cisco Meraki cloud-managed networking across MX security appliances, MS switches, and MR wireless access points - including dashboard and template configuration, SD-WAN, VLAN and SSID design, firmware management, and corporate/branch office deployments.
• Operate and tune the FortiSASE platform: ZTNA, cloud-delivered secure web gateway, SPA/SIA tunnels, PoP selection, and identity-aware access policy for the remote workforce.
• Design and support Kubernetes/OpenShift networking (OVN-Kubernetes SDN), including ingress/egress control, service exposure, and granular network policy across multi-cluster deployments.
• Configure and troubleshoot ingress controllers - Traefik and/or NGINX - covering routing rules, TLS termination, certificate handling, and upstream service health.
• Manage Cloudflare: WAF custom and managed rules, bot management, load balancing and origin pools, DNS zone administration, and Zero Trust policy.
• Maintain internal and external DNS, certificate lifecycle, and load balancer (FortiADC) configurations.
• Partner with application, security, and cloud teams on deployments, incident response, and root cause analysis.
• Produce accurate network diagrams and documentation; perform changes in accordance with established SOP and change management guidelines.
• Configuration of DataDog Network monitoring and alerting, Leads architecture and development of NVIDIA’s network visibility platform, integrating topology, configuration, telemetry, active measurement, change intelligence, and self-service tools. Builds authoritative network models, defines observability and measurement strategies, establishes data contracts and quality standards, and delivers health, path, and blast-radius insights. Drives cross-functional roadmaps, build-versus-buy decisions, operational tradeoffs, and technical mentorship across large-scale infrastructure systems.

• At least 7 years of enterprise networking experience, with a minimum of 4 years focused on cloud networking (Azure preferred).
• Hands-on production experience administering FortiGate firewalls.
• Demonstrated Azure networking experience (VNETs, NSGs, UDRs, ExpressRoute, Private Link, native load balancing).
• Working experience with a SASE platform - FortiSASE strongly preferred.
• Practical Kubernetes/OpenShift networking experience, including CNI behavior, services, and network policy.
• Configuration experience with Traefik or NGINX ingress controllers.
• Production experience with Cloudflare - WAF, load balancing, and DNS.
• Solid protocol fundamentals: BGP, OSPF, DNS, DHCP, TLS/PKI, VRRP, RADIUS/TACACS+.
• Scripting and automation ability (Python, PowerShell, or Terraform) with Git-based workflows.
• Strong attention to detail, problem analysis, and problem-solving skills.
• Excellent written and verbal communication skills; ability to work independently and as part of a team, including after hours support as needed.
• BS degree in Computer Science, Engineering, MIS/CIS, or a related subject, or equivalent experience., * Fortinet NSE 4+ certification
• Microsoft AZ-700 (Azure Network Engineer Associate)
• CCNA/CCNP
• CKA (Certified Kubernetes Administrator)
• FortiADC, FortiManager, and FortiAnalyzer experience
• Experience with certificate lifecycle automation platforms
• Experience with observability tooling such as Datadog

High-speed internet required for remote work, Cable or Fiber ONLY with the ability to connect via Ethernet. Minimum speeds: 70/30 Mbps (basic), 200-300/35-70 Mbps (shared), 500-1,000/100+ Mbps (heavy use).

**Please note that the compensation and benefit information that follows is a good faith estimate for this position only and is provided pursuant to applicable state and local laws on pay transparency. It is estimated based on what a successful applicant in the relevant state might be paid. **

The annual compensation for this position generally ranges between $115,000 - $150,000., * 401(k)

• Dental insurance
• Disability insurance
• Employee discounts
• Health insurance
• Life insurance
• Paid time off
• 12 paid holidays per year
• Paid training
• Referral program
• Vision insurance

Supplemental pay types:

• Referral bonuses, In-Office or Remote United States 131K-155K Annually Senior level 131K-155K Annually Senior level Software Provides staff-level customer-facing technical support for complex multi-cloud networking and security issues. Serves as an escalation point, leading troubleshooting, packet analysis, root cause analysis, deployments, integrations, optimization, and upgrades. Collaborates with sales, solution engineering, and product engineering teams; identifies defects, validates fixes, and improves product quality. Develops technical documentation, runbooks, and troubleshooting guides while advising leadership on recurring customer issues. Top Skills: Amazon Web Services (Aws)ArubaAviatrixAws EniAws Transit Gateway (Tgw)Aws VpcAzure FirewallAzure Load BalancerAzure VnetAzure Vnet PeeringBarracudaBgpCheck PointCisco AsaCisco IsrCloud InterconnectCloud RouterCloud VpnDnsFortinetGcp VpcGoogle Cloud Platform (Gcp)Ipsec VpnJuniperLinuxMerakiAzureNatOspfPalo AltoPythonRiverbedShell ScriptingSonicwallSophosSsl VpnTcp/Ip NVIDIA, 2 Days Ago In-Office or Remote 168K-334K Annually Senior level 168K-334K Annually Senior level Artificial Intelligence * Computer Vision * Hardware * Robotics * Metaverse Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks. Top Skills: AristaAWSAzureBgpCiscoClaude CodeCumulus OsCursorFortigateFortimanagerGCPGrafanaIds/IpsIs-IsMellanoxOciOspfPythonShell ScriptingSplunkVrfsVxlan

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

AmeriSave Mortgage Corporation is currently seeking a Cloud Network Engineer to join our Network Infrastructure team. This role supports enterprise network and network security architecture for AmeriSave Mortgage, spanning multiple Azure regions, OpenShift microservice clusters, corporate offices, and our SASE and edge security platforms.