Cloud Network Engineer

Overview

Cloud Network Engineer role extending on-premises networking fundamentals into AWS cloud networking, with a primary focus on architecting and operating FedRAMP-aligned environments, and serving as the primary liaison between the Network and Cloud Ops teams.

What you'll do

• Operate and maintain on-premises and cloud network infrastructure, including routing/switching changes, datacenter resource changes, and routine firewall/security group changes end-to-end across on-prem and cloud environments; escalate complex or security-sensitive changes to the Sr. Engineer/SecOps.
• Design and implement AWS network architectures, including VPCs, Transit Gateway, VPN, Direct Connect, Route 53, and network security controls, aligned with FedRAMP, ISO 27001, and SOX requirements.
• Lead the CIDR range overlap remediation project by auditing existing on-prem and AWS CIDR allocations, designing a conflict-free addressing plan, and executing remediation/re-IP work with minimal disruption to production traffic.
• Serve as the primary day-to-day liaison between the Network team and Cloud Ops on network design, shared infrastructure changes, and incident coordination.
• Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices, extending networking expertise into AWS environments.
• Develop and maintain Infrastructure-as-Code and automation using Terraform, Ansible, Python, contributing reusable modules to the team's shared automation library.
• Participate in the shared 24x7 on-call rotation, independently resolving Tier-1 and Tier-2 escalations, including cloud connectivity issues.
• Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs, and provide regular progress updates.
• Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement and renewals.

What you'll need

• 3–5 years of total network administration/engineering experience, including 2+ years hands-on AWS cloud networking work with VPC design, Transit Gateway, VPN/Direct Connect, Route 53, and network security controls across hybrid environments.
• Demonstrated proficiency in Administrator/Engineer-level on-premises networking fundamentals.
• 3-5 hands-on experience with Cisco NX-OS/IOS/IOS-XE, Dell, and Palo Alto equipment.
• CCNA certification or equivalent hands-on experience.
• Experience implementing and maintaining security controls aligned with industry frameworks such as ISO 27001, SOC2, and FedRAMP.
• Strong documentation and organizational skills, with demonstrated ability to produce clear network diagrams, IPAM records, and runbooks that hold up under audit.
• Strong analytical and cross-team communication skills; comfortable operating as a liaison between technical teams with different priorities.

Nice to have

• CCNP in progress, or equivalent Network Engineer-level experience.
• Experience with IPAM tooling such as NetBox, phpIPAM, Infoblox, BlueCat.
• Experience with Azure networking services and hybrid connectivity.
• Direct experience supporting a FedRAMP ATO or continuous monitoring (ConMon) process.
• Formal project management or technical project leadership experience.
• Proficiency in dynamic routing protocols (EIGRP, BGP) and in identity and access management services including RADIUS, TACACS+, Duo, Okta, and Cisco ISE.

Details

• Location: Remote, United States.
• Work a hybrid or remote schedule depending on geographic proximity to a BeyondTrust office.
• Travel to offices or datacenters as needed (5–10%).
• Participation in the shared 24x7 on-call rotation.