Cloud Network Engineer

Berkshire Hathaway Specialty Insuance•Stevens Point, WI

52d•$75,000 - $115,000

About The Position

Berkshire Hathaway Specialty Insurance (BHSI) is seeking a skilled and forward-thinking Cloud Network Engineer to join our Global Digital Services team based out of our Stevens Point, WI or Boston, MA office locations. This newly created role is critical in shaping the future of our cloud infrastructure, ensuring it is secure, scalable, resilient, and aligned with industry best practices. As part of a high-performing team, you will be responsible for architecting and maintaining complex cloud network environments that support mission-critical financial applications and services across multiple regions. The ideal candidate will have technical expertise in Microsoft Azure networking, covering areas such as virtual networks, firewalls, routing, and hybrid connectivity. The role also involves using Cloudflare's services to support performance, security, and Zero Trust access control on a global scale. Knowledge of Zero Trust architecture is required, including experience with identity-aware access, micro-segmentation, and continuous verification throughout all network layers. This position requires a security-first mindset, with the ability to design and implement solutions that meet stringent regulatory requirements. You will work closely with cross-functional teams-including cybersecurity, DevOps, and enterprise architecture-to ensure seamless integration of cloud networking components into broader IT strategies. Supporting a global organization, this position may involve occasional night and weekend work. Ideal candidates will have experience in regulated industries, a passion for automation and infrastructure-as-code, and a proactive approach to problem-solving in dynamic, large-scale environments.

Requirements

Cloud Platforms: Deep expertise in Microsoft Azure, including networking, security, and monitoring.
Security & Access: Experience with Zero Trust frameworks, Cloudflare Zero Trust, and Azure AD Conditional Access.
Networking: Strong understanding of TCP/IP, DNS, BGP, IPSec, SD-WAN, and SASE.
Automation & IaC: Proficiency in Terraform, PowerShell, Python, and CI/CD pipelines.
Monitoring & Logging: Familiarity with Azure Monitor, Log Analytics, Cloudflare Analytics, and SIEM tools.
Protocols & Tools: Experience with REST APIs, SSL/TLS, Load Balancers, and Reverse Proxies.

Responsibilities

Design and implement secure, scalable network solutions in Microsoft Azure.
Integrate Cloudflare services for DNS, CDN, DDoS protection, and Zero Trust access.
Design and enforce Zero Trust network segmentation and identity-aware access controls.
Manage Azure networking components: VNets, NSGs, Azure Firewall, ExpressRoute, and VPN Gateways.
Monitor and troubleshoot network performance, latency, and connectivity issues.
Maintain infrastructure-as-code templates using Terraform, Bicep, or ARM.
Implement secure connectivity between cloud and on-prem environments.
Ensure compliance with PCI-DSS, SOX, GDPR, and internal security policies.
Conduct regular audits and vulnerability assessments of cloud network configurations.
Partner with DevOps, Security, and Application teams to support hybrid and cloud-native workloads.
Provide mentorship and technical guidance to junior engineers.
Participate in incident response and post-mortem analysis for network-related events.