Cloud Network Engineer

Overview

Hyatt Hotels Corporation seeks an enthusiastic Cloud Network Engineer to join our Global Network Engineering and Operations team. You will collaborate closely with the broader infrastructure team and contribute to Hyatt’s continued leadership in hospitality through cloud networking across our multi-cloud environments.

As our ideal candidate, you understand the power and purpose of our culture of care, and you embody our core values of Empathy, Inclusion, Integrity, Experimentation, Respect and Wellbeing. You enjoy working with others, are results driven and are looking for opportunities to develop personally and professionally.

Key responsibilities (not exhaustive, execution-focused):

• Implement, configure, and operate cloud networking services across Azure, AWS, and GCP and other hyper-scaler environments.
• Deploy, manage, and support Palo Alto firewalls (cloud and hybrid), including policy updates, NAT, routing, and rule optimization.
• Configure and maintain VPC/VNet networking components such as subnets, route tables, security groups, NACLs, and load balancers.
• Build and support cloud connectivity including VPNs, Express Route, Direct Connect, Cloud Interconnect, and peering.
• Execute network changes, upgrades, and migrations following established standards and change processes.
• Troubleshoot and resolve complex network and firewall issues in production environments.
• Participate in incident response, on-call rotations, root cause analysis, and service restoration activities.
• Use Infrastructure as Code (Terraform, Ansible, Power Shell) to deploy and maintain network configurations.
• Automate operational tasks and repetitive workflows using scripting and tooling.
• Monitor network health, performance, and security using cloud-native and third-party monitoring tools.
• Maintain accurate documentation, runbooks, and operational procedures.
• Collaborate with Security and Cloud Platform teams to implement approved designs and security controls.

• Execute cloud migration and expansion activities from on-prem to Azure, AWS, and GCP.
• Support firewall rulebase cleanups, policy migrations, and cloud firewall rollouts.
• Assist in implementing network security enhancements and operational improvements driven by Security and Architecture teams.
• Participate in disaster recovery testing and global failover exercises.

Experience

Required:

• 4+ years of hands-on network engineering experience, including cloud networking responsibilities.
• Strong hands-on networking fundamentals: TCP/IP, routing, subnetting, NAT, DNS, and load balancing.
• Direct operational experience supporting Azure, AWS, and/or GCP networking in production.
• Practical experience managing Palo Alto firewall policies and troubleshooting traffic flows.
• Experience using IaC tools such as Terraform in day-to-day operations.
• Experience executing network changes, incident response, and operational support activities.
• Experience working in an enterprise environment with formal change and incident management processes.

Experience Preferred:

• Experience supporting multi-cloud environments simultaneously.
• Palo Alto certification (PCNSE) or equivalent hands-on experience.
• Cloud certifications with an operational focus (Azure, AWS, or GCP).
• Experience with automation and scripting for network operations.
• Exposure to SASE, Zero Trust networking, or cloud security operations.
• Experience supporting global, 24x7 environments with on-call responsibilities.

The position responsibilities outlined above are not all-encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.

The salary range for this position is $86,200 to $112,000. This position is also eligible to earn an annual bonus. Final pay will depend on experience, skill level, and location, and will meet local requirements including minimum wage.

We value our relationships with recruitment partners and require that agencies contact us first before submitting any candidates. Hyatt will not be responsible for any fees and obligations associated with unsolicited submissions unless a formal agreement is in place.