Cloud Network Engineer
BeyondTrust · Remote United States
About this role
**BeyondTrust — Cloud Network Engineer** ## About the Role The Cloud Network Engineer extends BeyondTrust’s on-premises networking fundamentals into AWS cloud networking, with a primary focus on architecting and operating **FedRAMP-aligned** environments. You’ll use strong technical judgment and operational discipline to solve complex hybrid network engineering challenges and serve as the primary liaison between the **Network** and **Cloud Ops** teams. ## What You’ll Do - Operate and maintain BeyondTrust’s on-premises and cloud network infrastructure, including routing/switching changes, datacenter resource changes, and routine firewall/security group changes across on-prem and cloud environments; escalate complex or security-sensitive changes to the Sr. Engineer/SecOps. - Design and implement AWS network architectures: **VPCs, Transit Gateway, VPN, Direct Connect, Route 53**, and network security controls aligned with **FedRAMP, ISO 27001, and SOX**. - Lead **CIDR range overlap remediation**: audit existing on-prem and AWS CIDR allocations, design a conflict-free addressing plan, and execute remediation/re-IP work with minimal disruption. - Act as the primary day-to-day liaison between the Network team and Cloud Ops for network design, shared infrastructure changes, and incident coordination. - Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices. - Develop and maintain **Infrastructure-as-Code** and automation using **Terraform, Ansible, and Python**, contributing reusable modules to a shared automation library. - Participate in a shared **24x7 on-call** rotation, independently resolving Tier-1 and Tier-2 escalations (including cloud connectivity issues). - Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs; provide regular progress updates. - Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement/renewals. - Work a hybrid or remote schedule based on proximity to a BeyondTrust office; travel as needed (**5–10%**). ## What You’ll Bring - **3–5 years** total network administration/engineering experience, including **2+ years** hands-on AWS cloud networking work (VPC design, Transit Gateway, VPN/Direct Connect, Route 53, and network security controls across hybrid environments). - Proficiency in administrator/engineer-level on-premises networking fundamentals. - **3–5 years** hands-on experience with **Cisco NX-OS/IOS/IOS-XE, Dell, and Palo Alto** equipment. - **CCNA** certification (or equivalent hands-on experience). - Experience implementing and maintaining security controls aligned with **ISO 27001, SOC 2, and FedRAMP**. - Strong documentation and organizational skills (network diagrams, IPAM records, runbooks suitable for audit). - Strong analytical and cross-team communication skills; comfortable acting as a liaison between technical teams with different priorities. ## Nice To Have - **CCNP** in progress (or equivalent Network Engineer experience). - Experience with IPAM tooling such as **NetBox, phpIPAM, Infoblox, BlueCat**. - Experience with **Azure networking** services and hybrid connectivity. - Direct experience supporting a **FedRAMP ATO** or continuous monitoring (**ConMon**) process. - Formal project management or technical project leadership experience. - Proficiency in dynamic routing protocols (**EIGRP, BGP**) and IAM services including **RADIUS, TACACS+, Duo, Ok
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.