Cloud Network Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Assist the US Department of the Treasury TCloud enterprise cloud development initiative.

• Oversee the configuration, installation, and continuous support of network infrastructure, including Palo Alto firewalls, Cisco VPN Concentrators, Cisco CSR devices, Azure, and OCI networking.

• Design, implement, and maintain network components within cloud platforms.

• Monitor ongoing network operations, identifying potential issues and implementing corrective actions.

• Enforce cloud security best practices and security measures across cloud networks.

• Manage network protocols, VPCs, subnets, software-defined networking, virtual networking, and cloud IAM.

• Install and maintain routers, firewalls, load balancers, VPN, and QoS services.

• Conduct network maintenance and system upgrades, including service packs, patches, hotfixes, and security configurations.

• Collaborate with network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control.

• Monitor performance, system availability, reliability, resource utilization, trends, and capacity.

• Provide Level 2/3 support and troubleshooting.

⛳️ Requirements

• Must be a US Citizen with the capability to obtain a Public Trust clearance.

• Bachelor's degree and seven (7) years or more of relevant experience, or a Master's degree and four (4) or more years of relevant experience.

• Extensive experience with Terraform.

• Familiarity with AWS Security group deployment using Terraform.

• Experience with cloud or on-premises devices such as Cisco and Palo Alto firewalls.

• Solid technical knowledge of TCP/IP networks and standards (IEEE 802.1).

• Experience with EKS Cluster is essential.

• Understanding of DoD STIGs and IA Vulnerability Management (IAVM).

• Proficient in configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs.

• Strong knowledge of TCP/IP network technologies, including DNS, DHCP, TFTP, NAT, and SSL.

• Participation in a 24/7 on-call rotation is required.

• Preferred certifications include Azure Fundamentals, GCP or Oracle Cloud Certifications, CCNP or higher, CCIE and/or CISSP, and Palo Alto Networks Certified Network Security Engineer (PCNSE).

🏝️ Benefits

• Performance bonuses.

• Training and educational reimbursement.

• Transamerica 401(k).

• Cigna healthcare benefits.

• PTO available to use immediately upon joining (prorated based on start date).

• Paid parental leave.

• Individual and family health, vision, and dental benefits.

• Annual budget for training, professional development, and tuition reimbursement.

• 401(k) plan with company match, fully vested after 60 days of employment.

• Diverse and collaborative work environment.

• Opportunities for professional growth.