Enterprise Network and Cloud Engineer

Brown Investment Advisory & Trust•Baltimore, MD

3d•Hybrid

About The Position

Brown Advisory is seeking an Enterprise Network and Cloud Engineer to join their dynamic Infrastructure team. This role involves supporting a network of over 2000 nodes and requires the ability to work with limited supervision, be proactive, and shift focus between project and support work as needed. Experience in trading or financial services is preferred. The firm values entrepreneurial individuals who take initiative to identify and resolve issues. This position supports a hybrid, cloud-connected enterprise network, focusing on secure connectivity, cloud network controls, identity-aware access, monitoring, and hardware-agnostic architecture across on-premises, data center, cloud, and SaaS environments.

Requirements

4+ years of experience as a network engineer preferred
Bachelor’s degree or 8+ years of work experience
Proven analytical and problem-solving abilities
Ability to evolve with growing tech space.
Proficient in Wireshark, packet tracing or comparable tools to determine attribution of technical issues
Experience supporting enterprise switching, routing, wireless, and firewall platforms; Cisco, Palo Alto, Fortinet, Aruba, Meraki, or equivalent technologies preferred
Core networking concepts, VLANs, Subnets, Trunking, Routing Protocols
Experience with network security products, Cisco ISE/NAC, Forescout, etc
Logic Monitor / Environmental Monitoring Systems
Basic AD administration knowledge - DHCP, DNS and AD Sites and Services
Experience with vulnerability management and cloud security platforms such as Tenable, Defender for Cloud, Wiz, Prisma Cloud, or equivalent
Azure networking and cloud security experience including VNets, NSGs, Azure Firewall, load balancers, private endpoints, VPN gateways, and hybrid connectivity
Experience with SASE/SSE, ZTNA, CASB, Secure Web Gateway, and modern remote access technologies
Knowledge of Zero Trust architecture, NAC solutions, identity-aware access controls, and least privilege design principles
Experience supporting virtual environments, such as Hyper-V, VMWare, Nutanix
Experience with monitoring, observability, SIEM, and log analysis platforms.
Exposure to infrastructure automation using Terraform, Bicep, PowerShell, Python, Ansible, or similar tools.
Data center support knowledge (HVAC, Power, monitoring software)
Positive attitude
Treat all employees and contacts with mutual respect
Ability to work autonomously or with limited supervision
Time management and prioritization skills
Excellent organization and communication skills
Vendor management skills
Ability to write and follow technical documentation
Big picture focused
Detail oriented
Applicants must be authorized to work in the United States without the need for current or future employer-sponsored work authorization (e.g., H-1B , O-1, F-1 (OPT), TN, or any other non-immigrant visa classifications that require employer support or sponsorship).

Nice To Haves

Previous trading or financial services experience is preferred.

Responsibilities

Maintain core networking equipment (Switching / Routing / Firewalls / Wireless).
Triage network and systems related issues escalated with Service Desk.
Design and support system architecture.
Design, maintain, troubleshoot, and optimize cloud networking and security services within Azure and hybrid environments.
Support and optimize voice, video, collaboration, and other cloud-based applications and services.
Assist in the design, implementation and management of enterprise SASE/SSE, Zero Trust, and secure access solutions.
Assist the security team in reviewing IOCs, network events, cloud security alerts, vulnerability findings, and anomalous activity.
Support cloud network security controls including segmentation, private connectivity, VPN services, routing, and cloud-native firewalls.
Develop and maintain network and cloud architecture documentation, standards, diagrams, and operational runbooks.
Ensure change process is followed; create and execute detailed change tickets.
Participate in infrastructure automation and modernization initiatives.