Network & Cloud Connectivity Engineer

Concert Properties Ltd.•Vancouver, BC

16h•CA$100,000 - CA$130,000

About The Position

The Network & Cloud Connectivity Engineer is a senior technical role responsible for the reliability, secure configuration and resilience of Concert's on-prem and cloud network infrastructure. This role owns the design, configuration, operation and continuous improvement of Concert's network environment across on-premises sites and the Cloud, including the security perimeter. The Network & Cloud Connectivity Engineer owns day-to-day network infrastructure operations and supports Operational Technology (OT) network configuration and services in alignment with Enterprise Architecture and Information Security standards. Successful candidates are passionate about current network, cloud connectivity and security practices. The right candidate is detail oriented, organized and able to maintain a stable, secure and best practices aligned network infrastructure.

Requirements

Degree or diploma in Computer Science, Network & Cloud Connectivity Engineer, Information Technology or equivalent experience.
Minimum 5–8 years of hands-on enterprise network architecture & engineering experience.
Network Cisco certifications: CCNA; CCNP Enterprise or CCNP Security strongly preferred.
Microsoft Azure certifications AZ-700 (Azure Network Engineer Associate).
Strong hands-on experience configuring and managing Cisco/Meraki Firewalls, Switches, Wireless Access Points, Routing and SD-WAN environments.
Strong hands-on experience designing, implementing, configuring and managing ZTNA platforms.
Strong hands-on experience designing, implementing, configuring, and managing Cloud Networks, including VNets, Firewalls, DNS Zones and Private Endpoints.
Strong hands-on experience with automating network configurations and workflows (e.g., Ansible).

Nice To Haves

Microsoft Azure certifications AZ-305 (Azure Solutions Architect)
Hands-on experience managing and maintaining network detection and response (NDR) tools.
Experience with DevOps pipeline integration for network automation workflows.
Familiarity with OT/BAS network environments and monitoring.
ITIL Foundation certification.

Responsibilities

Own the day-to-day reliability, availability, and performance of Concert's network infrastructure within defined uptime KPIs.
Act as technical platform owner for all network infrastructure, maintaining accurate and current documentation.
Monitor capacity utilisation, bandwidth performance, and latency across all sites and connectivity paths.
Manage network lifecycle to ensure the network estate remains supportable and secure.
Manage physical network deployments, including occasional travel to corporate offices or data center/co-location facilities for hardware installation, racking, stacking and cable maintenance.
Maintain firmware across the network and manage change windows for updates in alignment with the ITSM change management process.
Provide Level 2 and Level 3 support for network-related incidents and service requests.
Work within Concert's established ITSM processes for incidents, requests, changes, problems, asset/configuration and knowledge management.
Administer and maintain enterprise switches across Concert's office and data centre environments — including configuration, VLAN management, trunking, port security and QoS.
Design and maintain Layer 2 and Layer 3 network architecture, including inter-VLAN routing, static and dynamic routing protocols and redundancy configurations.
Manage switch stacking, uplink redundancy and access layer design to ensure resilient connectivity to all endpoints, servers and OT-connected systems.
Conduct regular configuration audits against defined standards and remediate deviations in alignment with Network Architecture standards.
Administer network environment — including wireless access points, firewalls and switches — through centralized dashboards.
Design, deploy, and optimise wireless networks across Concert office and site locations, ensuring coverage, capacity and security needs are met.
Manage SD-WAN configurations — including WAN uplink management, traffic shaping and failover policies — to ensure reliable and prioritised connectivity across all locations.
Proactively monitor network environment health and alerts for capacity planning and issue identification.
Oversee the transition from legacy network access patterns toward a Zero Trust network architecture.
Administer and maintain Concert's ZTNA platform while managing user and group policy configurations, app segment definitions and access policies.
Monitor ZTNA platform health, tunnel availability and policy effectiveness.
Contribute to Zero Trust architecture maturity by identifying legacy access patterns that can be replaced with ZTNA application-level access controls.
Design, configure, and maintain Concert's cloud networking environment — including Virtual Networks (VNets), subnets, hub-and-spoke topology, VNet peering, Network Security Groups (NSGs) and User Defined Routes (UDRs).
Manage hybrid network connectivity between on-premises and cloud.
Administer Cloud Firewall policies, private DNS zones and private endpoints to enforce consistent network security controls across cloud workloads.
Monitor Cloud network health through monitoring tools; contribute to Cloud cost optimisation by rightsizing network resources and reviewing egress patterns.
Champion network configuration automation to reduce manual operations risk, improve consistency and accelerate the delivery of network changes at scale.
Develop and maintain automation scripts and playbooks to automate repetitive network configuration tasks.
Maintain and advance the Network-as-Code (NaC) pipeline, ensuring configuration updates are deployed via structured CI/CD workflows rather than direct manual CLI adjustments.
Build and maintain a network configuration repository under version control, ensuring all configuration changes are tracked, peer-reviewed and auditable.
Integrate network automation workflows with DevOps pipelines where applicable, enabling infrastructure-as-code practices to extend to the network layer.
Design and maintain network segmentation architecture — including VLAN isolation, firewall zone definitions and micro-segmentation controls.
Manage and review network access control policies across switching, firewall and ZTNA layers in alignment with Concert's security posture and GRC requirements.
Support vulnerability management activities as they relate to network infrastructure — coordinating patching and firmware updates within defined SLA targets.
Contribute to the annual DR/BCP test process for network-dependent systems — validating network failover paths, recovery procedures and connectivity restoration within RTO targets.
Participate in security audits, risk assessments and compliance reviews as the network subject matter expert.
Support incident response activities involving perimeter firewall events — providing traffic analysis, log review and containment actions.
Provide network-layer support for Concert's Operational Technology (OT) environment — including building automation systems (BAS), smart building integrations and OT-connected devices across Concert's real estate portfolio.
Contribute to OT asset visibility by ensuring OT network segments are monitored and tapped appropriately, feeding into Concert's broader OT security posture management.