Cloud Network Engineer

WebTPA, part of GuideWell, is migrating infrastructure to AWS while exiting data center capacity and rebuilding its disaster recovery posture. The Cloud Network Engineer will design and operate AWS network architecture, hybrid connectivity, multi-region and colocation connectivity, cloud security controls, DNS, monitoring, and migration cutovers.

Responsibilities:

• Design and operate VPC architecture, address space allocation, and routing across a multi-account AWS environment
• Build and run the transit layer using Transit Gateway or Cloud WAN
• Design and operate hybrid connectivity, including Direct Connect and site-to-site VPN
• Build and operate connectivity between AWS partitions and to secondary cloud platforms
• Own cloud DNS, including Route 53, resolver rules, and hybrid name resolution
• Support trading partner and vendor connectivity, including EDI and clearinghouse tunnels
• Implement network segmentation separating regulated workloads, under security-approved policy
• Configure and operate cloud firewalls, inspection paths, egress controls, and load balancing
• Design the multi-region network model supporting disaster recovery, and validate failover through testing
• Design and manage colocation and carrier connectivity, including circuit diversity and provider management
• Plan and execute network cutovers during migration waves, including rollback
• Deliver network configuration through Terraform
• Build network monitoring and capacity visibility. Feed network telemetry to security operations
• Maintain topology documentation and serve as escalation for network incidents

Requirements:

• 8+ years related work experience in networking
• 4+ years managing hybrid cloud/on-premises network infrastructure
• Related Bachelor's degree required
• Strong routing fundamentals, including BGP in hybrid environments
• Hands-on AWS/Azure networking: foundational networking, hub-and-spoke, hybrid connectivity
• Firewall and network security policy experience
• Experience supporting production cutovers under change control
• Troubleshooting across TCP/IP, DNS, load balancers, and routing
• Colocation and carrier circuit experience: cross connects, diverse path design, provider management
• Exerting up to 10 pounds of force occasionally to move objects
• Jobs are sedentary if traversing activities are required only occasionally
• This position offers a hybrid work arrangement which combines flexibility with in office engagement. Team schedules are determined based on role requirements and business needs. Travel to and from our corporate offices may be required
• Healthcare payer experience, including partner and EDI connectivity
• Multi-region or multi-site network design supporting disaster recovery, including failover testing
• AWS GovCloud networking, including cross-partition routing and DNS
• Networking across two or more major cloud platforms, including connectivity between them. Which platform was primary does not matter
• Terraform or equivalent infrastructure as code
• Data center migration, exit, or secondary site standup experience
• Palo Alto or Fortinet firewalls in cloud
• AWS Advanced Networking Specialty, CCNP, or CCIE