Cloud Network Architect

Job Description

An immediate opening for a Cloud Network Architect position to support our federal government client. The successful candidate will support Azure and AWS network architectures and connectivity options, with an initial focus on managed network and security services.

Alongside a team of cloud and network engineers, the Sr. Network Engineer will engage with line and program offices in a solutions architecture capacity, perform design and proof of concept work, deploy new services for customers, and support the operational Cloud environment.

• Leverage Amazon Web Services and Azure to build scalable network infrastructure
• Participate in building and supporting an Azure landing zone that will provide security and routing services from hub VNETs with IaaS-based firewalls managing traffic between VNETs and Express Routes.
• Facilitate connectivity from customer spoke VNets to managed Hub VNet
• Build, troubleshoot and manage virtual machine lifecycle for IaaS
• Apply security and load balancing rules within managed environment
• Engage with customers to understand workload and application requirements for IaaS, PaaS, and SaaS services and make recommendations to enhance customer success
• Develop enhancements to existing managed service environment and perform design and proof of concept work for new features
• Promote best practices to ensure governance and compliance
• Participate in change control process alongside cloud and network engineers
• Automate processes and builds where possible to reduce manual effort
• Maintain operational environment to meet customer SLAs

• Strong knowledge of networking protocols and technologies including BGP, IPSec, network segmentation, VRFs, Switching, VLANs and load balancers.
• Experience deploying Network Virtual Appliances in Cloud, most preferably from Fortinet (but could be Palo Alto, Cisco, or F5)
• Understanding of variety of Direct Connect, Express Route and VPN connectivity options to connect AWS/Azure, and premises for hybrid connectivity
• Experience administering firewalls, including security features and configurations, either on-prem or in cloud
• Experience with load balancers, and understanding of options for packet header manipulation
• Strong understanding of AWS and Azure technologies across compute, storage, network, database
• Practical experience migrating customer workloads from premises to cloud
• Understanding of modern devops practices, containerization, security, and observability
• Scripting ability to enable automation solutions and deploy infrastructure as code, interacting with Azure Resource Manager (ARM) with Terraform, Azure Power Shell, and Azure CLI
• Strong understanding of identity management, federated identity systems (Microsoft ADFS), MFA, and Active Directory integration with cloud apps and Azure AD
• Deep operational experience ensuring efficient troubleshooting and speed to problem resolution
• Strong written, verbal, and presentation skills, and ability to communicate complex technical ideas to many audiences
• 8+ years of experience in networking and 5+ years in cloud engineering
• Professional certifications such as AWS certification, AZ-104 (AZ-103), AZ-204 (AZ-203), AZ-303 (AZ-300), AZ-400, AZ-500, CCNP, JNICP, CCIE, JNCIE is desirable

Applicants selected will be subject to a government security investigation and may need to meet eligibility requirements for access to classified information.

W2 only, no Corp to Corp. We are unable to sponsor applicants for work visas at this time.

We wish to thank all applicants for their interest and effort in applying for the position; however, only candidates selected for interviews will be contacted.