Cloud Network Engineer

About the role

BeyondTrust is looking for a Cloud Network Engineer to extend its on‑prem networking expertise into AWS. The role focuses on designing, operating, and securing FedRAMP‑aligned cloud environments while acting as the primary liaison between Network and Cloud Ops teams.

Key responsibilities

• Operate and maintain on‑prem and AWS network infrastructure, including routing, switching, firewall, and security‑group changes.
• Design AWS architectures (VPC, Transit Gateway, VPN, Direct Connect, Route 53) that meet FedRAMP, ISO 27001, and SOX requirements.
• Lead CIDR overlap remediation, audit existing allocations, and execute re‑IP work with minimal disruption.
• Mentor network staff on hybrid connectivity and cloud networking best practices.
• Develop Infrastructure‑as‑Code using Terraform, Ansible, and Python, and contribute reusable modules.
• Participate in a 24×7 on‑call rotation, handling Tier‑1 and Tier‑2 escalations.

Required profile

• 3–5 years of network administration/engineering experience, including 2+ years of hands‑on AWS networking.
• Strong on‑prem networking fundamentals with Cisco NX‑OS/IOS/IOS‑XE, Dell, and Palo Alto equipment.
• CCNA certification or equivalent experience.
• Experience implementing security controls aligned with ISO 27001, SOC2, and FedRAMP.
• Excellent documentation, analytical, and cross‑team communication skills.

Required skills

• AWS services: VPC, Transit Gateway, VPN, Direct Connect, Route 53.
• Infrastructure‑as‑Code: Terraform, Ansible, Python.
• Networking hardware: Cisco NX‑OS/IOS/IOS‑XE, Dell, Palo Alto.
• Security frameworks: FedRAMP, ISO 27001, SOC2, SOX.
• IPAM tools: NetBox, phpIPAM, Infoblox, BlueCat (nice‑to‑have).