Senior Cloud Infrastructure Networking Engineer

BETSOL; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Benefits offered by this job

Health insurance

401K

Volunteer programs

Scholarship opportunities

Fitness center

Cafe

Recreational facilities

Job summary

BETSOL in Bengaluru, India is seeking a Cloud Infrastructure Networking Engineer to design and implement enterprise network architecture in AWS. The role is an autonomous IC, owning VPC design, security boundaries, and connectivity, and partnering with Security and Platform Engineering to reduce operational toil.

You will lead incidents end-to-end, build Terraform modules, automate tasks with Python/Bash, and ensure reliable remote access via GlobalProtect.

Qualifications

• Deep hands-on AWS networking design, operations, and troubleshooting.
• Strong operational experience with Palo Alto firewalls and GlobalProtect.
• Hands-on Terraform experience for networking (modules).
• Experience with CI/CD pipelines for infrastructure (GitHub Actions preferred).
• Solid Linux and Windows production experience.
• Proven ability to lead incidents end-to-end and drive durable fixes.

Responsibilities

• Design and operate VPCs, subnets, routing, segmentation, ingress/egress patterns, security boundaries, and VPC endpoints/PrivateLink-style connectivity.
• Define scalable networking standards for workload onboarding, security, and repeatability.
• Troubleshoot complex AWS connectivity issues: routing, access controls, DNS resolution patterns.
• Administer Palo Alto firewall policy lifecycle: safe changes and segmentation strategy.
• Own GlobalProtect remote access operations, stability, access controls, incident response.
• Partner with Security to ensure network controls align with risk posture and audit expectations.
• Build and maintain AWS networking and firewall infrastructure using Terraform (modules).
• Automate tasks with Python and Bash (PowerShell is a plus).
• Participate in on-call rotation and lead incident response for infrastructure and connectivity issues.

Skills

AWS networking

Palo Alto firewall

GlobalProtect

Terraform

CI/CD for infra

Linux/Windows production

Incident leadership

Communication skills

On-call readiness

Tools

Terraform

GitHub Actions

GitLab CI

Palo Alto Panorama

GlobalProtect

Job description

• Full-time

Company Description

BETSOL is a cloud-first digital transformation and data management company offering products and IT services to enterprises in over 40 countries. BETSOL team holds several engineering patents, is recognized with industry awards, and BETSOL maintains a net promoter score that is 2x the industry average.

BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and best-in-class performance.

BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for its customers.

BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore, India.

We take pride in being an employee-centric organization, offering comprehensive health insurance, competitive salaries, 401K, volunteer programs, and scholarship opportunities. Office amenities include a fitness center, cafe, and recreational facilities.

Learn more at betsol.com

Job Description

The Cloud Infrastructure Networking Engineer is responsible for designing and implementing the enterprise network architecture. This role will lead the development of scalable, secure, and integrated data platforms to support analytics, compliance, and business operations.

This role will be the cloud networking authority for the AWS environment. This role owns the design, operations, and reliability of everything from VPC architecture and firewall policy to remote access and infrastructure automation. This role also brings strong systems-engineering instincts: incident leadership, monitoring hygiene, and the drive to reduce operational toil over time.

This is a high-autonomy individual contributor role. This role sets direction for networking decisions, make the calls, and drive execution. This role will partner closely with Security and platform engineering, and own the networking domain

Responsibilities

• Design and operate VPCs, subnets, routing, segmentation, ingress/egress patterns, security boundaries, and VPC endpoints/PrivateLink-style connectivity
• Define scalable networking standards that make workload onboarding consistent, secure, and repeatable
• Troubleshoot complex connectivity issues across AWS: routing, access controls, DNS resolution patterns
• Administer Palo Alto firewall policy lifecycle: safe changes, segmentation strategy, troubleshooting
• Own GlobalProtect remote access operations, stability, access controls, incident response
• Partner with Security to ensure network controls align with risk posture and audit expectations

Infrastructure as Code & Automation

• Build and maintain AWS networking and firewall infrastructure using Terraform (reusable modules, reviewable changes, controlled rollouts)
• Automate operational tasks with Python and Bash (PowerShell is a plus)

Operational Excellence

• Participate in on-call rotation and lead incident response for infrastructure and connectivity issues
• Improve monitoring, alerting, and operational visibility to catch issues earlierDrive root-cause analysis and prevention work to reduce repeat incidents

Qualifications

Required

• Deep hands-on experience with AWS cloud networking, design, operations, and troubleshooting (not just consumption)
• Strong operational experience with Palo Alto firewalls and GlobalProtect
• Hands-on Terraform experience, especially for networking (module-oriented, standards driven)
• Experience with CI/CD pipelines for infrastructure (GitHub Actions preferred; GitLab CI or equivalent is fine)
• Solid experience supporting Linux and Windows in production
• Proven ability to lead incidents end-to-end and drive durable fixes not just workarounds
• Strong communication skills and the confidence to operate as the networking authority, setting direction, making decisions, and explaining tradeoffs to non-network audiences
• Participate in on-call rotations

Nice to Have

• Identity experience: Okta administration, SSO/SAML, SCIM
• Experience automating Palo Alto changes via IaC (Panorama API, Terraform provider)
• AWS governance exposure: Account Factory for Terraform, CloudTrail/Config patterns, Organizations
• PCNSE or AWS networking-focused certifications
• Build and maintain GitHub Actions workflows for infrastructure CI/CD (plan/apply gating, workflow reliability)

Additional Information

Working Hours would be 6pm - 3am IST(EST hour coverage)