Cloud Network Engineer

MTSI is seeking a full-time Cloud Network Engineer located at Wright-Patterson AFB, Ohio. The Cloud Network Engineer will design, implement, and support cloud-based network infrastructure for a pilot enclave and future expanded cloud presence. This role will focus on hybrid connectivity, cloud network segmentation, routing, firewalling, load balancing, secure access, DNS integration, network security controls, and cloud architecture alignment.

The candidate should have hands-on experience deploying and supporting cloud networking in AWS, Azure, Google Cloud, or similar environments, with a strong understanding of enterprise networking and hybrid integration.

Responsibilities:

Your essential job functions will include but may not be limited to:
Design and implement cloud network architecture for pilot and production environments.
Support hybrid connectivity between on-premise infrastructure and cloud environments.
Develop cloud VPC/VNet designs, subnets, route tables, security groups, network ACLs, firewalls, gateways, and transit architectures.
Implement segmentation strategies for multi-tenant systems, management networks, shared services, frontend access, backend storage, and application environments.
Support cloud VPNs, private circuits, transit gateways, virtual WANs, cloud routers, and direct connectivity.
Integrate cloud DNS, identity-aware access, certificate services, logging, and monitoring.
Support cloud firewall policies, network inspection, egress control, ingress control, and zero-trust network principles.
Work with DevOps engineers to codify cloud networking using Terraform, Ansible, or equivalent automation tools.
Develop cloud network diagrams, traffic flow diagrams, routing plans, and firewall rule matrices.
Support test planning, validation, failover testing, and production readiness assessments.
Provide recommendations for scalability, resilience, performance, security, and cost optimization.
Participate in cloud architecture reviews and migration planning.
Explain cloud network design decisions to architecture boards and leadership.
Work collaboratively with network, security, DevOps, and system teams.
Identify risks before implementation.
Participate in migration planning, cutover events, test events, and rollback planning.
Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements.
Mentor junior staff and participate in architecture reviews.
Create and deliver system status updates to customers and stakeholders

Qualifications Required:
Applicants must have experience with:

o Enterprise networking fundamentals including routing, switching, DNS, VPN, NAT, subnetting, segmentation, and firewalling.

o Cloud networking constructs such as VPCs, VNets, subnets, route tables, gateways, peering, private endpoints, security groups, and cloud firewalls.

o Hybrid connectivity patterns between on-premise networks and cloud environments.

o Network security architecture including segmentation, inspection, access control, and least privilege.

o Load balancing, reverse proxies, TLS termination, and application delivery concepts.

o Cloud logging and network telemetry.

o High availability and disaster recovery concepts for cloud networks.

o Cloud-native and third-party network security appliances.

o Infrastructure as Code for cloud network deployment.
Experience with one or more major cloud providers. Multi-cloud experience is preferred.

o AWS

VPC, Subnets, Route Tables

Security Groups, NACLs

Transit Gateway

Site-to-Site VPN

Direct Connect

Route 53

Elastic Load Balancing

AWS Network Firewall

PrivateLink

CloudWatch, VPC Flow Logs

IAM and KMS basics

o Microsoft Azure

VNets, Subnets, NSGs

Azure Firewall

Virtual WAN

VPN Gateway

ExpressRoute

Azure Load Balancer, Application Gateway

Private Link, Private Endpoints

Azure DNS

Network Watcher

Entra ID integration awareness

o Google Cloud

VPC Networks

Cloud Router

Cloud VPN

Cloud Interconnect

Firewall Rules

Cloud Load Balancing

Private Service Connect

Cloud DNS

VPC Flow Logs
Candidates should have working knowledge of:

o Terraform/HCL

o Python

o Bash or PowerShell

o YAML and JSON

o Cloud CLI tools such as AWS CLI, Azure CLI, loud
Strong documentation and diagramming discipline.
Attention to detail in routing, firewall rules, and security group configuration.
Strong troubleshooting across on-premise and cloud boundaries.

• Ability to communicate clearly with technical and non-technical stakeholders.

Self-starter with a strong sense of personal responsibility.
10 years of network engineering, cloud engineering, or infrastructure engineering experience.
At least 3-5 years of hands-on cloud networking experience preferred.

Education:
Bachelor's degree in preferred in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field.

Preferred certifications include:
AWS Advanced Networking Specialty
AWS Solutions Architect
Azure Network Engineer Associate
Azure Solutions Architect Expert
Google Professional Cloud Network Engineer
Cisco CCNP Enterprise or CCNP Security
CompTIA Security+
CCSP

Even better if you have these desired skills:
Terraform, OpenTofu
Ansible
CloudFormation, AWS CDK, ARM, Bicep
GitLab, GitHub Enterprise, Azure DevOps
Palo Alto VM-Series, Fortinet FortiGate-VM, Cisco cloud security appliances
Aviatrix, Alkira, Prosimo, or other cloud networking platforms
Wireshark, tcpdump, cloud packet capture tools
Elastic, Splunk, Grafana, Prometheus
.

Clearance Requirements:
Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).

#LI-MM1

#ONSITE