? Enterprise Network Engineering ? Design, implement, and support highly available network infrastructure across on-prem data centers, private cloud, AWS, and Azure. Engineer resilient Layer 2/Layer 3 architectures including routing, switching, BGP, OSPF, VXLAN/EVPN, and SDN technologies. Support enterprise resiliency and disaster recovery. ? Infrastructure Automation ? Build IaC solutions using Terraform; develop reusable modules and standardized deployment patterns. Automate network provisioning and configuration management. Integrate automation into Git-based CI/CD pipelines. Eliminate manual networking activities through automation-first engineering. ? Scripting & Automation ? Develop automation using Python, PowerShell, Bash, and REST APIs to handle provisioning, validation, compliance verification, drift detection, operational reporting, and health monitoring. ? Network Isolation & Segmentation ? Lead enterprise initiatives for network isolation, secure enclaves, air-gapped environments, Isolated Recovery Environments (IRE), secure management networks, and recovery architectures. Design secure separation between production, non-production, recovery, cyber recovery, and management networks. ? Micro-Segmentation ? Design and implement enterprise micro-segmentation using VMware NSX, Illumio, Cisco Secure Workload, cloud-native security groups, Azure NSGs, AWS Security Groups, and Network ACLs. Manage East-West traffic control, Zero Trust architectures, least-privilege access, dynamic policy enforcement, and application dependency mapping. ? Cloud Networking ? Engineer networking solutions across AWS (VPCs, Transit Gateway, Direct Connect, Route Tables, PrivateLink, Network Firewall) and Azure (VNets, ExpressRoute, Virtual WAN, Azure Firewall, NSGs, Application Gateway, Load Balancer). ? Security Engineering ? Collaborate with Cyber Security to implement Zero Trust networking, Network Access Control, secure remote connectivity, firewall architecture, IDS/IPS, DDoS protection, secure DNS, certificate management, and encryption in transit. ? Resiliency Engineering ? Design networking solutions supporting High Availability, Disaster Recovery, active-active/passive architectures, multi-region cloud deployments, automated failover, resilient routing, and critical application recovery. ? Monitoring & Observability ? Implement enterprise network observability using tools like ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus, and cloud-native monitoring. Develop dashboards, KPIs, and automated alerting for proactive network operations.

Requirements

? Enterprise network engineering (routing, switching, BGP, OSPF, VXLAN/EVPN, SDN). ? Hybrid cloud networking (5+ years supporting on-prem, private cloud, AWS, and Azure). ? Network isolation, secure enclave design, air-gapped environments, and recovery network architectures. ? Micro-segmentation (VMware NSX, Illumio, Cisco Secure Workload, cloud-native security groups). ? Zero Trust networking principles and least-privilege access. ? Infrastructure as Code using Terraform (3+ years) ? building reusable modules and standardized patterns. ? Scripting with Python, PowerShell, or Bash for provisioning, validation, compliance, drift detection, and monitoring. ? CI/CD pipeline integration (Git-based). ? AWS: VPCs, Transit Gateway, Direct Connect, Route Tables, PrivateLink, Network Firewall. ? Azure: VNets, ExpressRoute, Virtual WAN, Azure Firewall, NSGs, Application Gateway, Load Balancer. ? Firewall architecture, IDS/IPS, DDoS protection, secure DNS, encryption in transit. ? High Availability, Disaster Recovery, active-active/passive architectures, multi-region failover, automated failover. ? Tools such as ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus, and cloud-native solutions. ? Dashboard development, KPI tracking, and automated alerting.

Information Technology - DevOps Engineer (Cloud Engineer) - No C2C

Key skills

About this role

Requirements