Cloud Network Engineer

BeyondTrust

About The Position

The Cloud Network Engineer extends BeyondTrust's on-premises networking fundamentals into AWS cloud networking, with a primary focus on architecting and operating FedRAMP-aligned environments. The role requires strong technical judgment and operational discipline to address complex hybrid network engineering challenges, and serves as the primary liaison between the Network and Cloud Ops teams. The engineer operates and maintains on-premises and cloud network infrastructure, designs AWS network architectures, leads CIDR overlap remediation, and develops infrastructure-as-code and automation. The role also includes mentoring network staff, participating in a shared 24x7 on-call rotation, maintaining technical documentation, and managing vendor relationships. The schedule may be hybrid or remote depending on proximity to a BeyondTrust office, with travel to offices or datacenters as needed (5–10%).

Requirements

3–5 years of total network administration or engineering experience, including 2+ years of hands-on AWS cloud networking work involving VPC design, Transit Gateway, VPN/Direct Connect, Route 53, and network security controls across hybrid environments.
Administrator/Engineer-level proficiency in on-premises networking fundamentals.
3–5 hands-on experience with Cisco NX-OS/IOS/IOS-XE, Dell, and Palo Alto equipment.
CCNA certification or equivalent hands-on experience.
Experience implementing and maintaining security controls aligned with industry frameworks such as ISO 27001, SOC2, and FedRAMP.
Strong documentation and organizational skills, including the ability to produce clear network diagrams, IPAM records, and runbooks suitable for audits.
Strong analytical and cross-team communication skills, including comfort serving as a liaison between technical teams with different priorities.

Nice To Haves

CCNP in progress, or equivalent Network Engineer-level experience.
Experience with IPAM tooling such as NetBox, phpIPAM, Infoblox, or BlueCat.
Experience with Azure networking services and hybrid connectivity.
Direct experience supporting a FedRAMP ATO or continuous monitoring (ConMon) process.
Formal project management or technical project leadership experience.
Proficiency in dynamic routing protocols (EIGRP, BGP) and identity and access management services including RADIUS, TACACS+, Duo, Okta, and Cisco ISE.

Responsibilities

Operate and maintain on-premises and cloud network infrastructure, including routing and switching changes, datacenter resource changes, and routine firewall and security group changes across environments; escalate complex or security-sensitive changes to the Sr. Engineer/SecOps.
Design and implement AWS network architectures involving VPCs, Transit Gateway, VPN, Direct Connect, Route 53, and network security controls aligned with FedRAMP, ISO 27001, and SOX requirements.
Lead CIDR range overlap remediation by auditing existing on-premises and AWS CIDR allocations, designing a conflict-free addressing plan, and executing remediation and re-IP work with minimal production disruption.
Serve as the day-to-day liaison between the Network team and Cloud Ops for network design, shared infrastructure changes, and incident coordination.
Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices.
Develop and maintain Infrastructure-as-Code and automation using Terraform, Ansible, and Python, contributing reusable modules to the team's shared automation library.
Participate in the shared 24x7 on-call rotation and independently resolve Tier-1 and Tier-2 escalations, including cloud connectivity issues.
Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs, and provide regular progress updates.
Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement and renewals.
Travel to offices or datacenters as needed (5–10%).