Sr. Cloud Network Engineer

Jones Lang LaSalle Incorporated; Región Centro; Presencial; MXN 900.000 - 1.400.000; Jornada completa

Descripción de la vacante

Jones Lang LaSalle Incorporated is seeking an experienced Senior Cloud Network Engineer to design, implement, and secure enterprise network services across Azure, AWS, and GCP. The role focuses on Azure networking with collaboration across cloud, security, and operations teams to deliver scalable multi-cloud solutions.

The ideal candidate brings hands-on Azure networking expertise, strong AWS and GCP skills, and experience with Terraform, Git-based workflows, and infrastructure automation.

Formación

• Bachelor's degree in computer science, information technology, engineering, or related field, or equivalent experience.
• 7+ years of enterprise network engineering with hands-on Azure and cloud networking across AWS and GCP.
• Strong Azure networking knowledge incl. Virtual WAN, Private Link, DNS, and Firewall.

Responsabilidades

• Design scalable Azure network architectures (VNet, NAT, NSG, Private Link).
• Operate AWS network architectures (VPC, Transit Gateway, Direct Connect).
• Design GCP network services (Shared VPC, Cloud Interconnect, DNS).
• Build multi-region network patterns for availability and security.
• Lead automation via Terraform and CI/CD pipelines.

Conocimientos

Azure networking

AWS networking

GCP networking

Terraform

Git-based infra

Networking fundamentals

Security fundamentals

Educación

Bachelor's degree in CS/IT/Engineering

Herramientas

Terraform

Git

Descripción del empleo

JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.

Position Overview

JLL is seeking an experienced Senior Cloud Network Engineer to design, build, secure, and operate enterprise network services across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Azure is the primary focus of this role, with responsibility for supporting standardized connectivity and network architecture across JLL’s broader multi‑cloud environment. The ideal candidate brings deep Azure networking expertise together with strong hands‑on AWS and GCP skills, enterprise networking fundamentals, infrastructure automation experience, and a security‑first mindset. This individual will collaborate with cloud platform, cybersecurity, architecture, application, and operations teams to deliver scalable, resilient, and consistent multi‑cloud network solutions.

Key Responsibilities

• Design and implement scalable Azure network architectures using Virtual Networks, subnets, route tables, Network Security Groups, Azure Virtual WAN, Virtual Network Manager, NAT Gateway, Private Link, and Azure DNS.
• Design and operate AWS network architectures using VPCs, subnets, route tables, Transit Gateway, Cloud WAN, Direct Connect, Site‑to‑Site VPN, PrivateLink, Route 53, and Network Firewall.
• Design and support GCP network services using Shared VPC, Network Connectivity Center, Cloud Router, Cloud Interconnect, HA VPN, Private Service Connect, Cloud NAT, Cloud DNS, and hierarchical firewall policies.
• Build regional and multi‑region architectures that meet availability, performance, security, and disaster‑recovery requirements.
• Engineer connectivity among Azure, AWS, GCP, enterprise data centers, branch locations, and strategic technology partners using ExpressRoute, Direct Connect, Cloud Interconnect, VPN, and software‑defined networking services.
• Support Azure, AWS, and GCP landing zones and establish standardized network patterns for new subscriptions, accounts, projects, applications, and business units.
• Review application onboarding requirements and recommend appropriate connectivity, segmentation, DNS, load‑balancing, and security designs.
• Design and maintain Azure Firewall policies, AWS Network Firewall policies, GCP hierarchical firewall policies, security groups, network ACLs, microsegmentation controls, ingress and egress policies, and secure routing standards.
• Integrate cloud‑native networking with enterprise security platforms, including Palo Alto Networks Cloud NGFW and VM‑Series, secure web gateways, and zero‑trust services.
• Support internal and external load‑balancing solutions, including integration with web application firewalls and application‑delivery services.
• Partner with cybersecurity teams to implement network security controls aligned with zero‑trust principles and JLL security standards.
• Assist with vulnerability remediation, audit requests, compliance assessments, and implementation of required security controls.
• Develop and maintain reusable Terraform modules for Azure, AWS, and GCP network services and connectivity patterns.
• Automate network provisioning, configuration validation, compliance checks, and operational workflows.
• Integrate infrastructure code with Git‑based version control and CI/CD pipelines.
• Implement policy‑as‑code and configuration standards to reduce manual changes and prevent network drift.
• Produce clear technical documentation, network diagrams, configuration standards, and operational runbooks.
• Monitor the health, performance, utilization, and availability of Azure, AWS, and GCP network services.
• Troubleshoot complex routing, BGP, DNS, firewall, latency, packet‑loss, and application‑connectivity issues.
• Use Azure Network Watcher and Connection Monitor, AWS Reachability Analyzer and VPC Flow Logs, GCP Network Intelligence Center and Connectivity Tests, packet captures, and related observability tools.
• Lead root‑cause analysis for major incidents and develop corrective and preventive actions.
• Participate in change management, capacity planning, lifecycle management, and disaster‑recovery testing.
• Provide technical leadership during high‑severity incidents and participate in an on‑call rotation when required.
• Identify opportunities to improve network resilience, operational efficiency, security, and cost optimization.
• Serve as the subject‑matter expert for Azure networking while providing senior‑level engineering support for AWS, GCP, multi‑cloud architecture, and hybrid‑cloud connectivity.
• Collaborate with global network engineering, cloud platform, cybersecurity, enterprise architecture, application, and service‑management teams.
• Provide design reviews, technical guidance, and mentoring to engineers and operational support teams.
• Work with Microsoft, AWS, Google Cloud, telecommunications carriers, managed‑service providers, and technology vendors to resolve technical issues and deliver new capabilities.
• Help establish engineering standards, reference architectures, governance controls, and cloud network operating procedures.
• Support knowledge transfer and the transition of repeatable operational activities to managed‑service and support teams.

Required Qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent professional experience.
• Seven or more years of enterprise network engineering experience, including at least three years of hands‑on Azure networking experience and demonstrated AWS and GCP networking experience.
• Advanced Azure networking knowledge, including Virtual WAN, Virtual Network Manager, ExpressRoute, VPN Gateway, Azure Route Server, Private Link, Load Balancer, Application Gateway, Azure Firewall, Network Watcher, and Azure DNS.
• Advanced AWS networking knowledge, including VPC, Transit Gateway, Cloud WAN, Direct Connect, Site‑to‑Site VPN, PrivateLink, Elastic Load Balancing, Route 53, Network Firewall, Reachability Analyzer, and VPC Flow Logs.
• Strong GCP networking knowledge, including Shared VPC, Network Connectivity Center, Cloud Router, Cloud Interconnect, HA VPN, Private Service Connect, Cloud NAT, Cloud Load Balancing, Cloud DNS, and VPC Flow Logs.
• Strong understanding of TCP/IP, IPv4 and IPv6, BGP, DNS, NAT, VPNs, routing, segmentation, high availability, and network security.
• Experience designing connectivity between public cloud platforms and enterprise data centers.
• Hands‑on experience with Terraform and Git‑based infrastructure‑development practices.
• Experience troubleshooting complex network and application‑connectivity issues in large enterprise environments.
• Strong documentation, communication, problem‑solving, and stakeholder‑management skills.
• Ability to work effectively across globally distributed teams and manage multiple priorities.

Preferred Qualifications

• Microsoft Certified: Azure Network Engineer Associate or Azure Solutions Architect Expert; AWS Certified Advanced Networking – Specialty and Google Cloud Professional Cloud Network Engineer are also valued.
• Cisco CCNP, Palo Alto Networks PCNSE, HashiCorp Terraform Associate, or comparable industry certification.
• Experience with Palo Alto Networks cloud security solutions, Cloud NGFW, or VM‑Series firewalls.
• Experience with Azure Virtual WAN, AWS Transit Gateway or Cloud WAN, GCP Network Connectivity Center, ExpressRoute, Direct Connect, Cloud Interconnect, and multi‑cloud routing architectures.
• Experience with software‑defined WAN, secure access service edge, zero‑trust networking, and cloud‑based security services.
• Familiarity with Python, Go, PowerShell, or another automation language.
• Experience with GitHub Actions, GitLab CI, Azure DevOps, Jenkins, or similar CI/CD platforms.
• Knowledge of ServiceNow, ITIL processes, Agile delivery practices, and enterprise change management.
• Experience supporting a large, globally distributed organization with complex regulatory, security, and availability requirements.

Success Measures – First 12 Months

• Establish secure, scalable, and repeatable Azure‑led network architecture patterns across Azure, AWS, and GCP.
• Improve the resilience and operational visibility of Azure, AWS, GCP, and hybrid‑cloud connectivity.
• Increase infrastructure‑as‑code adoption and reduce manual network configuration.
• Strengthen routing, segmentation, firewall, and governance standards.
• Reduce recurring network incidents through automation, monitoring, and root‑cause remediation.
• Improve technical documentation and knowledge transfer across engineering and support teams.
• Deliver assigned cloud‑network initiatives within agreed scope, schedule, security, and availability requirements.

Location

On‑site –Mexico,MEX

At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you're pursuing.

JLL Privacy Notice Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely. For more information about how JLL processes your personal data, please view our Candidate Privacy Statement. For additional details please see our career site pages for each country.

Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities.

Jones Lang LaSalle ("JLL") está comprometida a trabajar con personas con discapacidades y proporcionarles accesibilidad. Si necesita un ajuste razonable para cualquier parte del proceso de empleo – incluyendo la candidatura en línea y/o el proceso general de selección – puede enviarnos un correo electrónico a [e-mail]. Este correo electrónico es solo para solicitar un ajuste razonable. Por favor, dirija cualquier otra consulta general de reclutamiento a nuestra página Contáctanos.

For over 200 years, JLL (NYSE: JLL), a leading global commercial real estate and investment management company, has helped clients buy, build, occupy, manage and invest in a variety of commercial, industrial, hotel, residential and retail properties. A Fortune 500 company with operations in over 80 countries around the world, our employees bring the power of a global platform combined with local expertise. Driven by our purpose to shape the future of real estate for a better world, we help our clients, people and communities SEE A BRIGHTER WAYSM. JLL is the brand name, and a registered trademark, of Jones Lang LaSalle Incorporated. For further information, visit jll.com.

At JLL, we give you the opportunity, knowledge and tools to own your success, because we value what makes each of us unique. We help our people thrive, grow meaningful careers and find a place where they belong. Together, we strive to be exceptional and shape a better world.