Senior Cloud Engineer

About Us

We’re not like other insurance companies. From our specialty products to our business model, our culture to our results — we’re different. Different is who we are, and how we work, interact, deliver and succeed together. Creating a different and better insurance experience doesn’t just happen. It takes focus and a shared passion for going beyond the expected to forge relationships and deliver care that makes a difference.

This approach rises from and is supported by our talented, ethical and smart team of employee owners united around a single purpose: to work alongside our customers and partners when they need us, in unexpected ways, with exceptional results. Apply today to make a difference with us.

Under general direction, the Senior Cloud Engineer serves as a knowledge expert and primary owner of RLI’s cloud and hybrid network platforms. This role is accountable for engineering, securing, and continually improving the network services that enable all RLI Teams and Products. The Senior Cloud Engineer combines deep expertise in Azure networking, next‑generation firewalls, and core routing and switching with strong platform engineering and automation practices.

They design scalable architectures, build Infrastructure‑as‑Code and automation frameworks, and translate complex business requirements into resilient, secure, and future‑ready network capabilities across the enterprise.

• Design, engineer and participate in the lifecycle ownership of RLI’s hybrid and cloud network platforms.
• Define and maintain end‑to‑end network standards and reference architectures that support enterprise growth and technology modernizations.
• Engineer and support Forti Gate platforms, including cloud‑native HA designs, SD‑WAN, advanced routing, security profiles, and Forti Manager automation.
• Ensure network security controls remain aligned with regulatory, audit, and risk requirements.
• Build and maintain Infrastructure‑as‑Code (IaC) modules using Pulumi (Azure
  
  RM, Fortinet, and related providers) to automate deployment and configuration of network services.
• Engineer and maintain network observability using Azure Monitor, Forti Analyzer, and other related providers.
• Plan and execute platform upgrades, lifecycle management, and capacity planning for network services.
• Collaborate with IT Security on Zero Trust Network Architecture (ZTNA), segmentation, and continuous compliance across cloud and on‑premises environments.
• Work closely with Dev Ops, Security, Infrastructure, and Application Teams to ensure network design and function align to enterprise roadmaps, IT governance, and business priorities.
• Mentor peers and junior engineers, providing technical guidance on cloud networking, automation, and platform engineering.
• Continuously evaluate emerging technologies and industry best practices to strengthen RLI networking capabilities.
• Identify and implement improvements to process, workflows, and automation to enhance reliability, consistency, and speed of delivery.
• Participate in 7×16 Infrastructure on‑call rotation for Production issues and monthly off‑hours maintenance activities.
• Provide technical expertise to RLI associates as needed and ensure clear communication around changes, impacts, and network platform decisions.
• Participate in monthly Sarbanes‑Oxley (SOX) processes; maintain accurate documentation and control evidence.
• Other duties, as assigned.

7+ years in design, engineering, and automation of network infrastructure across hybrid cloud environments, including at least 4 years with Azure networking.

• Microsoft Azure: AZ‑700, AZ‑305.
• Fortinet: FCP (Any), FCE.
• Cisco: CCNA, CCNP (Any), CCIE.

• Expertise in Azure networking frameworks (Azure Landing Zones, VNet hub‑and‑spoke, Virtual WAN topologies).
• Proficiency with Terraform/Pulumi and Git Ops workflow tooling.
• Hands‑on experience with cloud‑native network Azure security controls.
• Experience with Fortinet Forti Manager, Forti Analyzer, API automation, and advanced routing.
• Understanding of SASE, ZTNA, and modern remote‑access architectures.
• Deep familiarity with routing…