Cloud Network Engineer

HFM; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid Work Model (2 days working from

Comprehensive Health Insurance (from 日

21 days of Annual Leave

Referral Bonus Program

Job summary

HFM in Malaysia is seeking a Cloud Network Engineer to design, deploy, and manage AWS network infrastructure across accounts and regions, ensuring scalability, security, and reliability. You will configure Transit Gateway, Direct Connect, VPNs, and VPCs, implement hybrid architectures, and collaborate with Systems, DevOps, Security to document architectures and procedures.

The role requires 3+ years of AWS networking experience, strong BGP/TCP/IP knowledge, and a hands-on, teamwork-driven

Qualifications

• 3+ years of experience in a similar role.
• Strong hands-on experience with AWS networking, including Transit Gateway, Direct Connect, Site-to-Site VPN, and VPC.
• Solid knowledge of BGP, TCP/IP, routing, subnetting, NAT, VLANs, and IPsec VPNs.
• Experience with hybrid cloud connectivity, multi-region architectures, high availability, and network redundancy.
• Familiarity with enterprise firewalls, routers, switches, and network security best practices.
• Strong troubleshooting, analytical, and problem-solving skills, with the ability to work independently and collaborate across technical teams.

Responsibilities

• Design, deploy, and maintain AWS network infrastructure across multiple accounts and regions, ensuring scalability, security, and reliability.
• Configure and manage AWS networking services, including Transit Gateway (TGW), Cloud WAN, Direct Connect, Direct Connect Gateway (DXGW), and Site-to-Site VPNs.
• Manage VPC networking, routing tables, subnets, security groups, Network ACLs, and VPC peering.
• Configure and troubleshoot BGP routing, including route advertisements, filtering, path selection, and routing policies.
• Design and implement resilient hybrid network architectures, ensuring high availability, redundancy, load balancing, and automated failover.
• Diagnose and resolve complex network issues involving latency, packet loss, asymmetric routing, MTU, and throughput.
• Monitor and optimize network performance, ensure connectivity between AWS, on-premises data centers, and external providers, and support incident response, root cause analysis, and disaster recovery testing.
• Collaborate with Systems, DevOps, Security, and cross-functional teams on infrastructure initiatives while maintaining accurate network documentation, architecture diagrams, and operational procedures.

Skills

AWS networking

BGP routing

TCP/IP

Hybrid cloud

Network security

Troubleshooting

Documentation

Tools

Terraform

AWS CDK

Fortinet FortiGate

Arista

Cisco

Juniper

Grafana

Prometheus

CloudWatch

VPC Flow Logs

Reachability Analyzer

Azure networking

Google Cloud networking

Job description

HFM is an internationally acclaimed multi-asset broker, delivering cutting-edge trading tools, platforms, and conditions to traders worldwide. We are committed to innovation, transparency, and excellence in the financial markets.

As we continue to expand, we are seeking a driven and strategic Cloud Network Engineer to join our team.

Responsibilities

• Design, deploy, and maintain AWS network infrastructure across multiple accounts and regions, ensuring scalability, security, and reliability.
• Configure and manage AWS networking services, including Transit Gateway (TGW), Cloud WAN, Direct Connect, Direct Connect Gateway (DXGW), and Site-to-Site VPNs.
• Manage VPC networking, routing tables, subnets, security groups, Network ACLs, and VPC peering.
• Configure and troubleshoot BGP routing, including route advertisements, filtering, path selection, and routing policies.
• Design and implement resilient hybrid network architectures, ensuring high availability, redundancy, load balancing, and automated failover.
• Diagnose and resolve complex network issues involving latency, packet loss, asymmetric routing, MTU, and throughput.
• Monitor and optimize network performance, ensure connectivity between AWS, on-premises data centers, and external providers, and support incident response, root cause analysis, and disaster recovery testing.
• Collaborate with Systems, DevOps, Security, and cross-functional teams on infrastructure initiatives while maintaining accurate network documentation, architecture diagrams, and operational procedures.

Requirements

Must have

• 3+ years of experience in a similar role.
• Strong hands-on experience with AWS networking, including Transit Gateway, Direct Connect, Site-to-Site VPN, and VPC.
• Solid knowledge of BGP, TCP/IP, routing, subnetting, NAT, VLANs, and IPsec VPNs.
• Experience with hybrid cloud connectivity, multi-region architectures, high availability, and network redundancy.
• Familiarity with enterprise firewalls, routers, switches, and network security best practices.
• Strong troubleshooting, analytical, and problem-solving skills, with the ability to work independently and collaborate across technical teams.

Nice to have

• Experience with AWS Cloud WAN, network segmentation, and routing policies.
• Knowledge of Infrastructure as Code (IaC) tools such as AWS CDK or Terraform.
• Experience with Fortinet (FortiGate, BGP, IPsec VPN, SD-WAN) and Arista, Cisco, or Juniper networking equipment.
• Proficiency in Python, Bash, or other scripting languages, with experience in monitoring tools such as Grafana, Prometheus, CloudWatch, VPC Flow Logs, and Reachability Analyzer.
• Familiarity with Azure or Google Cloud networking and relevant certifications, such as AWS Certified Advanced Networking.
• Experience in financial services or other high-availability, low-latency environments.

Resumes must be submitted in English.

Applicants must be eligible or have legal authorization to work in the country where the position is based.

• Hybrid Work Model (2 days working from home)
• Comprehensive Health Insurance (from day one!)
• 21 days of Annual Leave
• Referral Bonus Program

Additional Support

• Visa Sponsorship and Relocation Assistance

All Applications will be handled with the strictest confidentiality.