Cloud Network Engineer

Booz Allen Hamilton•San Antonio, TX

1d•$77,500 - $176,000

About The Position

We are seeking a Senior Network Engineer to support the design, deployment, and maintenance of enterprise and tactical networks for the Department of War (DoW). This is an exciting opportunity to apply your expertise in wireless networking, , and cybersecurity to build secure and resilient infrastructure that directly impacts mission readiness and quality-of-life for military personnel and their families. You will be part of a dedicated team addressing critical communication challenges and driving innovation across enterprise and tactical environments. In this role, you will work on meaningful projects that emphasize mission-critical connectivity and strategic initiatives, enabling secure and scalable networking for DoW. As the lead expert, you’ll collaborate across IT teams to develop and optimize infrastructure that aligns with DoW cybersecurity compliance standards while supporting day-to-day operations and enhancing mission readiness.

Requirements

5+ years of experience with cloud network engineering in enterprise or government environments
Expertise in AWS or Azure cloud networking constructs, including VPC, TGW, VNet, vWAN, routing tables, endpoints, security groups, or NACLs
Experience with Layer 3 technologies, including BGP, OSPF, static routing, or network segmentation
Experience with Layer 7 firewalls, WAF, or NGFW platforms, including Palo Alto, Fortinet, AWS WAF, or Azure Firewall
Ability to obtain a Secret clearance
Bachelor’s degree in an IT or Engineering field or 8+ years of experience with network engineering or firewall administration in lieu of a degree
DoW 8140/Defense Cyber Workforce Framework (DCWF) compliant certification

Nice To Haves

Experience with network security tools such as Palo Alto or Fortinet firewalls
Experience with scripting or automation skills with tools such as Python or Ansible
Knowledge of cloud networking technologies, including AWS, Azure, or GCP

Responsibilities

Architect, deploy, and manage cloud network infrastructures across AWS, Azure, and other government cloud environments, including IL4–IL6 high-side enclaves.
Design and manage Layer 3 routing constructs, including VPC routing, transit gateways, peering, private endpoints, route optimization, and service mesh ingress and egress.
Engineer and maintain Layer 7 firewalling, including WAF, NGFW, application gateways, reverse proxies, and BCAP boundary controls.
Implement and enforce Zero Trust and BCAP-aligned boundary protection, including identity-aware segmentation, least-privilege access, and application-layer enforcement.
Build and manage hybrid connectivity solutions including Direct Connect, ExpressRoute, VPNs, inter‑cloud routing, and cross‑domain guard integrations.
Develop and maintain Infrastructure‑as‑Code (IaC) for networking, including Terraform, CloudFormation, ARM/Bicep, and Ansible.
Conduct packet analysis, network forensics, and performance diagnostics using tools such as tcpdump, Wireshark, and cloud-native monitors.
Collaborate with cybersecurity teams to operationalize STIGs, RMF controls, ATO/cATO requirements, cloud policy enforcement, and logging/telemetry pipelines.
Provide expertise during incident response, boundary security events, and connectivity disruptions.
Create and maintain network diagrams, CMDB entries, enclave documentation, and cross‑domain connectivity models.