Cloud Network Engineer

• Active Government Security Clearance:
  No
• Compensation: USD 106,000 - USD 118,000 - yearly

Tech Sur Solutions  is a digital services company whose mission is to enable digital transformation for our customers to improve quality and efficiency.

Based in the DC metropolitan area,Tech Surspecializes in advanced cloud services, modernization for both ITstructuresand applications, leveraging Agile development, and Data Analytics.

Since we were formed in August of2016,we have supported multiple impactful and exciting government programs.

Tech Sur is seeking a Cloud Network Engineer to design and run the network that connects a federal customer's private cloud, data centers, and four public cloud providers. You will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that put Zero Trust principles into practice across AWS, Azure, Google Cloud, and Oracle Cloud.

You will work with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN. You will then keep that connectivity secure, observable, and resilient in production.

• Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services.
• Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure Express Route, Google Cloud Interconnect, OCI Fast Connect, and IPsec site-to-site VPN.
• Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions.
• Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments.
• Implement Zero Trust network controls (micro-segmentation, private endpoints, identity-aware access) aligned with NIST SP 800-207 and customer security standards.
• Build network configurations as code with Terraform and track changes through Service Now change management.
• Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk.
• Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations.
• Document network designs, runbooks, and diagrams, and provide evidence for ATO packages.

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider.
• Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls.
• Experience provisioning dedicated cloud connections (Direct Connect, Express Route, Cloud Interconnect, or Fast Connect) and IPsec VPNs.
• Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
• Experience implementing Zero Trust network architecture or segmentation.
• Ability to obtain and maintain the background investigation required by the federal customer.

• Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE.
• AWS Certified Advanced Networking – Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer.
• Networking experience across more than one of AWS, Azure, GCP, and OCI.
• Experience with Terraform or Ansible for network automation.
• Experience with multi-cloud network or Zero Trust platforms (e.g., Aviatrix, Zscaler, Palo Alto Prisma Access).
• Experience in federal environments and with NIST SP 800-53 network controls.
• Prior support of a civilian federal agency.

All your information will be kept confidential according to EEO guidelines.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply