Cloud Network Engineer

TechSur Solutions • Reston, VA

15h

About The Position

TechSur Solutions is seeking a Cloud Network Engineer to design and operate the network connecting a federal customer's private cloud, data centers, and four public cloud providers. The engineer will build hub-and-spoke topologies, dedicated cloud interconnects, and firewall policies that apply Zero Trust principles across AWS, Azure, Google Cloud, and Oracle Cloud. The role collaborates with cloud engineers, security specialists, and customer network teams to integrate cloud networks with the customer's enterprise network and WAN, then maintain secure, observable, and resilient connectivity in production.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider.
• Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls.
• Experience provisioning dedicated cloud connections and IPsec VPNs.
• Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
• Experience implementing Zero Trust network architecture or segmentation.
• Ability to obtain and maintain the background investigation required by the federal customer.

Nice To Haves

• Cisco CCNP Enterprise or CCNP Security, or Palo Alto Networks PCNSE.
• AWS Certified Advanced Networking – Specialty, Microsoft Azure Network Engineer Associate (AZ-700), or Google Professional Cloud Network Engineer.
• Networking experience across more than one of AWS, Azure, GCP, and OCI.
• Experience with Terraform or Ansible for network automation.
• Experience with multi-cloud network or Zero Trust platforms such as Aviatrix, Zscaler, or Palo Alto Prisma Access.
• Experience in federal environments and with NIST SP 800-53 network controls.
• Prior support of a civilian federal agency.

Responsibilities

• Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services.
• Provision and manage dedicated connections and VPNs, including AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN.
• Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions.
• Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments.
• Implement Zero Trust network controls, including micro-segmentation, private endpoints, and identity-aware access, aligned with NIST SP 800-207 and customer security standards.
• Build network configurations as code with Terraform and track changes through ServiceNow change management.
• Monitor network performance and flows with cloud-provider-native tools and forward events to Splunk.
• Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations.
• Document network designs, runbooks, and diagrams, and provide evidence for ATO packages.

What This Job Offers

• Job Type: Full-time