Cloud Network Engineer

About the company

• BeyondTrust — global identity security leader with a cybersecurity SaaS portfolio.

Responsibilities

• Operate and maintain on-premises and cloud network infrastructure, including routing/switching, datacenter changes, firewall/security group changes.
• Design and implement AWS network architectures: VPCs, Transit Gateway, VPN, Direct Connect, Route 53, network security controls aligned with FedRAMP, ISO 27001, SOX.
• Lead CIDR range overlap remediation project: audit allocations, design conflict-free addressing plan, execute re-IP work.
• Serve as primary liaison between Network team and Cloud Ops.
• Mentor Network Administrators and Engineers on cloud networking and hybrid connectivity.
• Develop and maintain Infrastructure-as-Code using Terraform, Ansible, Python.
• Participate in 24x7 on-call rotation, resolving Tier-1 and Tier-2 escalations.
• Maintain network diagrams, CIDR/IPAM records, architecture documentation, SOPs.
• Manage vendor relationships for cloud connectivity and network infrastructure.

Requirements

• 3–5 years of network administration/engineering experience, including 2+ years hands-on AWS cloud networking (VPC, Transit Gateway, VPN/Direct Connect, Route 53).
• Proficiency in on-premises networking fundamentals.
• 3–5 years hands-on with Cisco NX-OS/IOS/IOS-XE, Dell, and Palo Alto equipment.
• CCNA certification or equivalent hands-on experience.
• Experience with security controls aligned with ISO 27001, SOC2, FedRAMP.
• Strong documentation and organizational skills.
• Nice to have: CCNP, IPAM tooling (NetBox, phpIPAM, Infoblox, BlueCat), Azure networking, FedRAMP ATO/ConMon, EIGRP/BGP, RADIUS, TACACS+, Duo, Okta, Cisco ISE.

Conditions

• Remote or hybrid depending on proximity to office; 5–10% travel.
• Shared 24x7 on-call rotation.