Cloud Network Engineer

Overview

Position Summary:

Own the design, reliability, and automation of enterprise network connectivity across on-prem and cloud. This role delivers secure, scalable network services (routing, segmentation, firewalling, VPN, DNS/IPAM, monitoring) with a platform mindset, enabling application teams and operations to move faster with guardrails. Success requires strong hands-on troubleshooting fundamentals plus the ability to implement repeatable patterns in AWS and Azure (hybrid connectivity, multi-account/subscription architectures, centralized inspection/egress, and network observability).

Provide resilient, secure, and automated connectivity as a service—reducing operational friction, improving time-to-delivery, and increasing network reliability through standard architectures and automation. Function as an engineer with a platform-oriented approach by standardizing best practices, minimizing manual effort through automation, and enhancing system reliability using telemetry data and insights from incident analysis.

• Network Architecture & Engineering
  — Design and operate enterprise LAN/WAN connectivity, including routing (BGP/OSPF), subnetting, segmentation, NAT, and high availability patterns.
• Network Architecture & Engineering
  — Build and maintain secure connectivity services: site-to-site VPN, remote access integration patterns, and encrypted transport where required.
• Network Architecture & Engineering
  — Partner with stakeholders to translate requirements into network designs that meet performance, resiliency, and security objectives.
• Cloud Connectivity (AWS + Azure)— Design and support cloud networking primitives and patterns in AWS and Azure (VPC/VNet, routing, segmentation, private connectivity, load-balancing integration, DNS considerations).
• Cloud Connectivity (AWS + Azure)— Engineer secure hybrid connectivity between on-prem and cloud, including routing, failover strategy, and operational runbooks.
• Cloud Connectivity (AWS + Azure)— Implement and operate multi-account/multi-subscription connectivity architectures (hub/spoke, shared services, centralized routing domains, and guardrails).
• Security Controls, Segmentation, and Inspection
  — Implement and manage network security controls in partnership with Security Engineering (firewall policy lifecycle, segmentation zones, secure egress).
• Security Controls, Segmentation, and Inspection
  — Deliver centralized inspection/egress patterns and ensure traffic flows are logged and traceable (flow logs, firewall logs) per requirements.
• Security Controls, Segmentation, and Inspection
  — Ensure network designs and telemetry align to healthcare privacy/security expectations, including segmentation, encryption in transit where required, and audit-friendly logging for incident response.
• Automation & Change Enablement
  — Automate repeatable network deployments and changes using infrastructure-as-code and version-controlled workflows (peer review, drift management).
• Automation & Change Enablement
  — Improve change reliability via validation (pre-checks/post-checks) and documentation-as-code where practical.
• Reliability & Operations
  — Maintain operational excellence through proactive monitoring, capacity awareness, and structured incident response participation.
• Reliability & Operations
  — Lead troubleshooting using packet-level analysis and systematic fault isolation across cloud and on-prem dependencies.
• Reliability & Operations
  — Continuously improve runbooks, diagrams, and reference architectures to reduce MTTR.
• Reliability & Operations
  — Collaborate with global colleagues.
• Vendor Governance
  — Manage provider performance and cloud connectivity; support optimization initiatives and contract deliverables as applicable.

• 7-10 years of hands-on experience as a Network Engineer (or similar) in a complex, multi-protocol environment.

• Hands-on cloud networking experience in AWS and/or Azure (VPC/VNet design, routing, segmentation, hybrid connectivity).

• Strong fundamentals in enterprise networking: TCP/IP, routing (BGP/OSPF), VLANs, subnetting, NAT/PAT, VPN, and packet-level troubleshooting.

• Infrastructure-as-code…