Cloud Network Security Engineer

Revolutional delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments. We apply modern capabilities, including AI/ML, cloud, cybersecurity, and IT modernization to solve complex challenges, enable faster and more secure operations, and drive measurable mission outcomes.

We are redefining how federal technology gets built and delivered by operating with a product mindset, prioritizing speed, ownership, and execution over bureaucracy.

Title: Cloud Network Security Engineer

Location: Onsite (Washington, D.C. or Bethesda, MD)

Terms: Full-time

Salary: 175k - 200k DOE

Clearance: Active Top Secret with SCI eligibility required

Citizenship: U.S. citizenship required

Travel: 0-10%

Revolutional has an exciting full time opportunity for a Cloud Network Security Engineer to own network connectivity between our federal government customer's on-premises environment and its cloud environments (currently Azure and AWS). This is a senior, hands‑on ownership role: the engineer will serve as the primary technical bridge between the customer's on‑premises network team and Revolutional's cloud/platform team, taking day‑to‑day responsibility for configuration, troubleshooting, firewall policy, and lifecycle management of hybrid, multi‑cloud network infrastructure.

A strong understanding of how cloud networking affects application design, routing, and capacity planning is central to this role.

• Configure and maintain core hybrid and multi‑cloud networking components, virtual networks, gateways, and site‑to‑site or dedicated circuit connections (e.g., Azure VNets/Express Route/Virtual WAN, AWS VPCs/Transit Gateways), along with DNS, IP address management, load balancing, and private connectivity to platform services.
• Configure and manage firewall and network security policy across platforms (NSGs, Azure Firewall, and enterprise platforms including Palo Alto and Cisco), including policy configuration, log analysis, and troubleshooting of connectivity issues.
• Design and optimize routing and traffic engineering (BGP, route tables, user‑defined routes), accounting for how application and data traffic patterns affect bandwidth‑constrained on‑premises circuits, and support secure, high‑throughput connectivity for priority mission initiatives.
• Manage DNS configuration (Azure DNS, Private DNS Zones) and IP address management (IPAM) across Azure subscriptions.
• Deploy and maintain Private Link / Private Endpoint configurations to secure connectivity to PaaS services.
• Monitor network health, performance, and security posture across on‑premises and cloud environments, and develop and maintain Infrastructure‑as‑Code for repeatable, auditable configuration changes.
• Document configurations, network diagrams, and standard operating procedures; respond to and resolve network incidents within defined SLAs; interface with telecommunications carriers and/or colocation providers as needed.
• Collaborate with security and infrastructure teams to support network design for new workloads, migrations, and the program's long‑term multi‑cloud strategy.

• Active Top Secret (TS) clearance with SCI eligibility. Must be a U.S. citizen.
• Bachelor's degree in a related technical field, or equivalent professional experience.
• 8+ years of overall network engineering experience.
• 5+ years of hands‑on experience configuring, administering, and troubleshooting cloud networking environments.
• Security+ Certification.

• Demonstrated experience configuring both Azure (VNets, subnets, NSGs, Express Route, VPN Gateway, Azure Firewall) and AWS (VPCs, Transit Gateways, Site‑to‑Site VPN,…