Senior Cloud Network Engineer

atKinectiveRemote

Colorado Full-time Network Engineer / Network AdministratorSenior$160k – $180k/year

Posted 4 days ago

This is a fully remote position, open to applicants in Colorado.

📋 Description

• Design and manage cloud network architectures across AWS and Azure, encompassing VPCs, VNets, and Transit Gateways.

• Implement network segmentation between production and non-production environments.

• Oversee routing, peering, segmentation, performance, availability, and observability across multi-cloud regions.

• Integrate networking into CI/CD pipelines and infrastructure-as-code practices.

• Design, provision, and maintain IPsec and SSL/TLS VPN tunnels for enterprise clients.

• Take ownership of client tunnel onboarding from technical scoping through cutover and ongoing support.

• Lead troubleshooting calls with customers and generate written root-cause analyses.

• Resolve tunnel stability, latency, routing, and connectivity challenges with client network teams.

• Maintain documentation for client connectivity, network diagrams, and data flows.

• Assist with SOC 2 Type II and PCI DSS audits by gathering evidence, addressing findings, and engaging with auditors.

• Implement network controls and perform reviews of firewalls, NACLs, security groups, and access controls.

• Collaborate on threat modeling, vulnerability remediation, and network-layer incident response activities.

• Create and maintain reusable OpenTofu/Terraform modules for cloud networking infrastructure.

• Deliver infrastructure modifications through peer-reviewed pull requests without making changes directly in the production console.

• Track tasks, changes, and incidents using JIRA.

• Develop monitoring, alerting, and runbooks to ensure network health.

• Participate in on-call rotation and lead post-incident reviews.

• Mentor junior engineers and contribute to architectural decisions and standards.

⛳️ Requirements

• Bachelor's degree in computer science, software engineering, or a related field, or equivalent practical experience.

• 5+ years of hands-on network engineering experience in cloud-native or hybrid settings.

• Extensive expertise in AWS networking (VPC, Transit Gateway, Route 53, Security Groups, NACLs, Network Firewall).

• Practical experience with AWS IAM, SSM, GuardDuty, and Security Hub.

• Proficient understanding of Azure networking (VNet, Azure Firewall, NSGs).

• Demonstrated experience in designing and operating IPsec/IKEv2 and SSL VPN tunnels for enterprise clients.

• Strong grasp of BGP, OSPF, and routing policies in multi-cloud and hybrid environments.

• Practical experience with SOC 2 and/or PCI DSS network controls and audit documentation.

• Experience in authoring reusable OpenTofu or Terraform modules.

• Solid foundation in TCP/IP fundamentals: subnetting, DNS, TLS, NAT, load balancing.

• Proficient in packet-level troubleshooting using Wireshark, tcpdump, mtr, iperf, and dig.

• Skilled in AWS CLI, Azure CLI, Python, Bash/PowerShell, and Docker.

• Excellent written and verbal communication skills; comfortable conducting technical calls with customer network engineers.

• No current sponsorship opportunities; available to Colorado residents only.

• Preferred: familiarity with modern AI tools, network observability tools, Nagios or similar platforms, zero trust architecture, Cisco Meraki, IPS/IDS, DDoS protection, WAF, hybrid DNS, Kubernetes networking, experience in financial services or regulated industries, relevant certifications, and CI/CD-driven infrastructure experience.