Cloud Network Engineer

Who are we?

A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.

We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized.

Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?

Learn more about our unique culture and history.

Berkshire Hathaway Specialty Insurance (BHSI) is seeking a skilled and forward-thinking Cloud Network Engineer to join our Global Digital Services team based out of our Stevens Point, WI or Boston, MA office locations. This newly created role is critical in shaping the future of our cloud infrastructure, ensuring it is secure, scalable, resilient, and aligned with industry best practices. As part of a high-performing team, you will be responsible for architecting and maintaining complex cloud network environments that support mission‑critical financial applications and services across multiple regions.

The ideal candidate will have technical expertise in Microsoft Azure networking, covering areas such as virtual networks, firewalls, routing, and hybrid connectivity. The role also involves using Cloudflare’s services to support performance, security, and Zero Trust access control on a global scale. Knowledge of Zero Trust architecture is required, including experience with identity‑aware access, micro‑segmentation, and continuous verification throughout all network layers.

This position requires a security‑first mindset, with the ability to design and implement solutions that meet stringent regulatory requirements. You will work closely with cross‑functional teams—including cybersecurity, Dev Ops, and enterprise architecture—to ensure seamless integration of cloud networking components into broader IT strategies. Supporting a global organization, this position may involve occasional night and weekend work.

Ideal candidates will have experience in regulated industries, a passion for automation and infrastructure‑as‑code, and a proactive approach to problem‑solving in dynamic, large‑scale environments.

• Design and implement secure, scalable network solutions in Microsoft Azure.
• Integrate Cloudflare services for DNS, CDN, DDoS protection, and Zero Trust access.
• Design and enforce Zero Trust network segmentation and identity‑aware access controls.
• Manage Azure networking components: VNets, NSGs, Azure Firewall, Express Route, and VPN Gateways.
• Monitor and troubleshoot network performance, latency, and connectivity issues.
• Maintain infrastructure‑as‑code templates using Terraform, Bicep, or ARM.
• Implement secure connectivity between cloud and on‑prem environments.
• Ensure compliance with PCI‑DSS, SOX, GDPR, and internal security policies.
• Conduct regular audits and vulnerability assessments of cloud network configurations.
• Partner with Dev Ops, Security, and Application teams to support hybrid and cloud‑native workloads.
• Provide mentorship and technical guidance to junior engineers.
• Participate in incident response and post‑mortem analysis for network‑related events.

• Cloud Platforms:
  Deep expertise in Microsoft Azure, including networking, security, and monitoring.
• Security & Access:
  Experience with Zero Trust frameworks, Cloudflare Zero Trust, and Azure AD Conditional Access.
• Networking:
  Strong understanding of TCP/IP, DNS, BGP, IPSec, SD‑WAN,…