Cloud Engineer - Network

The Subway HR Team•Shelton, CT

21h•Onsite

About The Position

This position is responsible for designing, deploying, and managing cloud and on-premises network infrastructure at Subway. The Cloud Network Engineer will architect and maintain cloud networking components across AWS and Azure, manage SD-WAN platforms, oversee routing and switching, and ensure reliable and secure connectivity across all Subway locations and data centers. They will partner with Architecture and Security teams to establish network standards and drive automation of network operations.

Requirements

Strong hands-on experience with enterprise routing and switching (Cisco, Juniper, or equivalent).
Experience with SD-WAN platforms such as Cisco Meraki or Palo Alto Prisma.
Proficiency with cloud networking on AWS (VPC, Transit Gateway, Direct Connect) and/or Azure (VNet, ExpressRoute).
Strong collaboration and communication skills.
Experience with enterprise DNS platforms and IPAM tooling.
Proficiency with Terraform for network infrastructure-as-code automation (required).
Experience applying AI/ML tools to network operations, automation, and anomaly detection (required).
Bachelor’s degree in Technology, Network Engineering, Computer Science, or a related field.
5+ years of hands-on network engineering experience in an enterprise environment.
8+ years of experience with Windows system administration.
3+ years configuring and troubleshooting BGP/OSPF routing in hybrid cloud/on-premises environments.
3+ years managing firewalls, VPN, and network security controls.
3+ years writing and maintaining Terraform modules for cloud and network infrastructure.
Experience leveraging AI tools for network automation, anomaly detection, or operational efficiency.

Responsibilities

Design and implement cloud networking solutions including VPCs, VNets, Transit Gateways, and ExpressRoute/Direct Connect.
Manage and optimize SD-WAN infrastructure across Subway’s global restaurant and corporate locations.
Configure and maintain routing protocols (BGP, OSPF) across on-premises and cloud environments.
Administer firewall policies, VPN tunnels, and network access controls in partnership with the Security team.
Monitor network performance, capacity, and availability; implement improvements and resolve incidents.
Maintain DNS infrastructure and manage IP address management (IPAM) platforms.
Develop and maintain network documentation, standards, and runbooks.
Mentor operations staff on network technologies and cloud networking best practices.
Coach Infrastructure colleagues on Active Directory and vulnerability remediation best practices.