Cloud Network Engineer

About the Organization

Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

Redhorse Corporation has an immediate opportunity for a Cloud Network Engineer to support a government customer. The selected candidate will work with a high-performance team to develop, design, and integrate robust physical and virtual networks for our client’s enterprise infrastructure. This role is critical in bridging the gap between legacy on-premises data centers and modern cloud environments in AWS and Azure.

The Engineer will need to work well with a team, always exhibit excellent customer service skills, and be self-motivated seeking ways to improve the environment.

• Hybrid Cloud Architecture:
  Design and architect hybrid network solutions integrating on-premises data centers with AWS and Azure cloud environments.
• High Availability/Redundancy:
  Develop and implement high-availability and redundancy strategies, including failover, load balancing, and disaster recovery architectures in multi-region environments.
• AWS Services:
  Design and manage AWS networking and security services such as VPCs, Transit Gateway, Direct Connect, Site-to-Site and Client VPN, Route 53, Elastic Load Balancing, AWS Security Groups, AWS NACL’s, and AWS Network Firewall.
• Azure Services:
  Design and manage Azure networking and security services including Virtual Networks (VNet), Express Route, Azure VPN Gateway, Azure Load Balancer, Azure NSG’s, and Azure Firewall.
• Legacy Infrastructure:
  Support and optimize on-premises infrastructure including Cisco NCS routers, Cisco Nexus switches using Cisco NX-OS and Cisco ACI, Forcepoint firewalls, and General Dynamics TACLANE devices
• Network Support:
  Monitor network performance, troubleshoot complex issues, and implement proactive improvements.
• Identity and Access:
  Collaborate with network, system and security teams to implement identity and access controls using RSA and Cisco ISE.
• Security Integration:
  Work closely with the Information Security Office to implement cloud security best practices, including AWS Security Groups, Azure Network Security Groups (NSGs), and Web Application Firewalls (WAF), ensuring solutions comply with Key Control Policies.
• Documentation:
  Develop and maintain architecture artifacts, Layer 1/2/3 detail designs, cloud network diagrams, sample configurations, and "how-to" documents for network administrators.
• Testing & Validation:
  Test/validate deployment of security patches, cloud firmware updates, and software upgrades in a lab environment before production rollout.
• Analysis:
  Conduct technical analyses of engineering documentation and installation plans pertinent to the design and checkout of complex communication systems.
• Support:
  Occasionally travel to remote CONUS; provide occasional support outside normal business hours for incident response and maintenance windows.
• Experience with Infrastructure as Code (IaC) using Terraform, Ansible, or Cloud Formation to deploy network resources.
• Proficiency in Python or Bash for automating repetitive network tasks and API integration with Cisco ACI.

• Security Clearance: An active Top Secret (TS) clearance is required.
• Professional
  
  Experience:
  
  Minimum of five (5) years of experience in network or system administration within an IT organization.
• Cisco Networking: Demonstrated experience in the design, implementation, and maintenance of Cisco enterprise and data center networking.
• SDN Knowledge: Proficiency in configuring, maintaining, and troubleshooting Software-Defined Networking (SDN) solutions (Cisco ACI preferred).
• Cloud Integration: Proven experience with cloud services (AWS and Azure), specifically regarding integration, migration, and hybrid configuration.
• Troubleshooting: Ability to diagnose and resolve complex networking…