Senior Network Cloud Engineer

UMass Memorial Health•Worcester, MA

3d•$87,277 - $157,082

About The Position

The Senior Network Cloud Engineer is responsible for designing, implementing, and managing secure, scalable, and reliable network infrastructures across cloud and hybrid environments. This role ensures optimal connectivity, high availability, and performance while aligning with enterprise architectural and security standards. The engineer will partner closely with service teams, Cloud Architects, and Security to support solution design, operations, troubleshooting, and continuous improvement of network services.

Requirements

Bachelor’s degree in computer science, engineering, information technology or related field.
5+ years of cloud environment experience.
Experience designing and operating Azure VNets, routing, peering, and DNS.
Strong proficiency with Azure VPN Gateway, IPSec/IKE, TLS, BGP.
Experience with ExpressRoute, Azure Load Balancer, Application Gateway, Front Door, Traffic Manager, Azure Monitor, Log Analytics, and Network Watcher.
Strong communication skills.

Nice To Haves

Azure Administrator Associate (AZ-104)
Azure Network Engineer Associate (AZ-700)
Microsoft Certified: Azure Solutions Architect Expert
Microsoft Certified: Cybersecurity Architect Expert
Microsoft Certified: DevOps Engineer Expert
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Support Engineer for Connectivity Specialty
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Windows Server Hybrid Administrator Associate
Microsoft Certified: Security Operations Analyst Associate
Microsoft Certified: Azure Stack Hub Operator Associate
Microsoft Certified: Azure Virtual Desktop Specialty
Advanced proficiency in Azure VNets, routing, gateways, and hybrid connectivity.
Strong understanding of VPN and ExpressRoute.
Deep knowledge of TCP/IP, DNS, VPN, IPSec/IKE, TLS, BGP.
Ability to implement and troubleshoot security controls and encryption.
Skilled in troubleshooting latency, throughput, and traffic flow.
Designs scalable and resilient network architectures.
Proficiency with Terraform, ARM templates, and automation of network resources.
Strong diagnostic reasoning and troubleshooting proficiency.
Effective communication with stakeholders across technical and non-technical teams.
Strong service-delivery mindset with proactive communication.
Stays current with Azure networking and cloud architecture best practices.
Expertise with Azure Firewall, Azure Firewall Manager, Azure DDoS Protection, and Azure Web Application Firewall (WAF).
Experience with Azure Virtual WAN and Secure Hub.
Proficiency in Azure Private Link, Private Endpoints, and Zero Trust segmentation.
Strong understanding of Azure DNS Private Resolver and hybrid DNS designs.
Advanced use of Azure Monitor, Log Analytics, and KQL for network observability.
Experience with Microsoft Defender for Cloud and Microsoft Sentinel.
Automation with Azure PowerShell, Azure CLI, Bicep, and GitHub Actions.
Knowledge of Azure Stack HCI, Azure Arc–enabled networking, and hybrid integration.

Responsibilities

Design, implement, and maintain cloud network architectures including VPCs, VNets, subnets, routing, peering, endpoints, gateways, and load balancers.
Configure and support secure connectivity between on-premises datacenters and cloud environments.
Ensure network reliability and performance through monitoring of traffic flows, latency, and throughput; proactively identify and resolve bottlenecks.
Perform troubleshooting and incident response for network-related issues, collaborating with service providers.
Maintain network health and compliance.
Run compliance and audit reports as required.
Partner with Cloud Architects and Security teams.
Communicate service health, risks, and performance challenges to service owners and customers.
Create and maintain network topology diagrams, firewall rulebooks, and runbooks.
Automate network resource provisioning using Terraform and ARM templates.
Maintains accurate network documentation and compliance records.