Cloud Network Engineer

Valiant Solutions, LLC•Silver Spring, NC

21h•$137,000 - $142,000•Hybrid

About The Position

Valiant Solutions is seeking a Cloud Network Engineer to design, automate, and operate the multi-cloud networking layer connecting a federal agency's on-premise data centers to Oracle Cloud Infrastructure and Google Cloud Platform. The engineer builds and maintains dedicated hybrid connectivity, provisions every GCP network component through version-controlled Terraform, and extends the agency's IPv6 addressing plan into both cloud tenancies. This role supports an active migration of on-premise databases to OCI and of workloads, data, and support systems to GCP, with the bulk of regional migrations targeted for completion by December 2026. Cloud connectivity is held to 99.95 percent availability and must meet TIC 3.0 inspection and logging requirements. This position is based in Silver Spring, MD, and allows for partial remote work.

Requirements

5 years of experience bridging traditional on-premises networking and cloud infrastructure.
Production experience with at least one of Oracle Cloud Infrastructure or Google Cloud Platform, and the ability to come up to speed quickly on the other.
Experience supporting a live data center to cloud migration, not only greenfield cloud build-out.
OCI networking: FastConnect, VCN design, CIDR planning, route tables, Security Lists, and Network Security Groups.
GCP networking: Cloud Interconnect, HA VPN, Global VPC, Shared VPC, VPC peering, Private Service Connect, and cloud load balancing.
Terraform as the authoritative provisioning mechanism, including module design, state management, and version control workflow.
BGP design and traffic engineering across hybrid and inter-cloud paths.
Dual-stack IPv6 deployment in cloud environments, including addressing and routing.
On-premise routing and switching fundamentals sufficient to troubleshoot a hybrid path end to end.
Scripting for network automation, for example Python, and familiarity with automated documentation generation.
Clear technical writing for Methods of Procedure, topology diagrams, standard operating procedures, and monthly status report inputs.
Working knowledge of federal network security direction, including Zero Trust Architecture (NIST SP 800-207), Trusted Internet Connection (TIC) 3.0 reference architectures, and the IPv6 mandate under OMB M-21-07.
Familiarity with NIST SP 800-53 Rev. 5 security and privacy controls as they apply to network and boundary protection.
Understanding of HSPD-12 identity credentialing and its enforcement in network access decisions.
Awareness of Section 508 accessibility requirements (WCAG 2.0 AA) as they apply to contract deliverables.
Experience operating inside a federal change control process, with government-approved documentation and deliverable acceptance criteria.
Written and verbal communication skills sufficient to explain network and security concepts to both engineers and non-technical government stakeholders.
Ability to brief senior government leadership, including the Contracting Officer's Representative and Technical Lead, on incident root cause, risk, and remediation.
Willingness to complete required customer training, including annual cybersecurity awareness, records management, privacy, safety, and harassment prevention training.

Nice To Haves

GCP Professional Cloud Network Engineer.
OCI Specialist certifications relevant to cloud networking.
HashiCorp Certified: Terraform Associate
CCNP Enterprise

Responsibilities

Manage the dual FastConnect virtual circuits terminating at the Ashburn data center, including BGP peering session configuration, maintenance, and bandwidth capacity planning.
Design and administer Virtual Cloud Networks, covering CIDR block allocation, subnets, route tables, Security Lists, and Network Security Groups.
Support the migration of on-premise Oracle databases and related resources into OCI, confirming network readiness ahead of each cutover.
Automate repeatable migration, validation, and documentation procedures so that network records stay accurate and auditable.
Manage Cloud Interconnect for high-throughput workloads and HA VPN for redundant backup paths.
Engineer Global VPCs, Shared VPC host and service project configurations, and VPC peering relationships.
Define, version control, and deploy every GCP network component through Terraform, including VPCs, firewall rules, Private Service Connect configurations, and load balancers.
Maintain the Terraform code base using the customer's native GCP tooling, including Google Cloud Secure Source Manager.
Provide hybrid connectivity support for workload, data, and support system migrations from on-premise infrastructure to GCP.
Engineer secure inter-cloud connectivity where an application in one cloud depends on a data service in the other, applying BGP traffic engineering to prevent suboptimal paths.
Confirm that all cloud traffic is inspected and logged in line with TIC 3.0 reference architectures.
Convert OCI and GCP environments from IPv4-only to IPv6 dual-stack, and confirm that cloud resources and remote access gateways meet IPv6 requirements.
Report monthly on FastConnect bandwidth utilization, BGP peering status, Interconnect and HA VPN health, and Terraform-executed provisioning changes.
Prepare Methods of Procedure for cloud network changes and carry them through the Change Control Board.
Participate in the 24x7x365 on-call rotation, responding to Priority 1 incidents within 15 minutes.

Benefits

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses