Job Description
Cloud Network Engineer – Azure, AWS, OCI & Hybrid Networking
Experience:
• 6–8 years
Essential Skills:
• More than 5 years of networking experience with 4+ years in cloud network engineering.
• Deep expertise in Azure Networking:
• VNet
• ExpressRoute
• VPN Gateway
• Azure Firewall
• Azure DNS
• Strong knowledge of AWS Networking:
• VPC
• Transit Gateway (TGW)
• Direct Connect
• Route 53
• ALB / NLB
• PrivateLink
• Hands-on experience with OCI Networking:
• VCN
• DRG
• FastConnect
• Security Lists
• Experience with:
• BGP routing
• Route summarization
• AS-PATH manipulation
• Proficiency with Fortinet FortiGate NVA configuration:
• Policies
• Routing
• HA failover
• Understanding of DNS resolution across hybrid environments:
• Conditional forwarders
• Private DNS Zones
• Certifications:
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
• AWS Advanced Networking Specialty
Role & Responsibilities:
• Design and implement cloud network architectures across:
• Azure:
• VNet
• ExpressRoute
• VPN Gateway
• AWS:
• VPC
• TGW
• Direct Connect
• OCI:
• VCN
• DRG
• FastConnect
• Configure and manage BGP routing across:
• ExpressRoute circuits
• CloudLink circuits
• On-premise peering
• Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including:
• Asymmetric routing
• Firewall drops
• DNS resolution failures
• Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for:
• North-south traffic inspection
• East-west traffic inspection
• Configure:
• NSGs
• UDRs
• Security Lists
• NACLs
• Route propagation across cloud platforms
• Support:
• ExpressRoute gateway SKU upgrades
• Circuit bandwidth changes
• Manage DNS architecture:
• Azure Private DNS Zones
• Route 53 Private Hosted Zones
• OCI DNS
• Custom resolvers
• Collaborate with CGI and third-party network providers on:
• Change management
• Incident resolution
• Investigate:
• VPC Flow Log data
• Azure Network Watcher logs
• Produce and maintain:
• Network architecture diagrams
• Runbooks
• Change documentation
Nice to Have Skills:
• Experience working with MSP/carrier-managed ExpressRoute environments.
• Knowledge of:
• SASE
• SD-WAN
• Zscaler Private Access (ZPA) architectures.
Requirements
60-70