Cloud Network Engineer, Software Support

Copeland Cold Chain LP; Quezon City; On-site; PHP 800,000 - 1,200,000; Full time

Job summary

Copeland Cold Chain LP is looking for a skilled AWS Networking Specialist in Quezon City, Philippines. This role involves managing customer onboarding, VPN connections, and DNS configurations. The right candidate will possess a Bachelor's degree in IT or related field, along with at least three years of hands-on experience in AWS networking and VPN management.

Additionally, a problem-solving mindset and strong communication skills are essential. The position may require working on weekends and providing on-call support.

Qualifications

• Bachelor’s degree or five years related experience.
• Minimum three years AWS networking experience.
• Experience with SNAT/NAT over VPN tunnels.

Responsibilities

• Set up VPC, subnets, and security groups for new customers.
• Manage DNS records and troubleshoot DNS issues.
• Create and maintain site-to-site VPN connections.

Skills

AWS Networking

VPN

DNS

Routing

Firewalls

Network troubleshooting

Monitoring

Education

Bachelor’s degree in Information Technology or Computer Engineering

CCNA or equivalent networking foundation

Job description

Responsibilities

• Customer Onboarding: set up VPC, subnets, security groups for new customers; configure VPN tunnels; establish routing between customer on‑prem and AWS; validate connectivity and handoff to application team.
• DNS Management: configure and maintain DNS records for hosted customer environments; manage Route 53 hosted zones; handle DNS changes during onboarding and offboarding; troubleshoot DNS resolution issues.
• VPN Tunnel Creation & Maintenance: create site‑to‑site VPN connections between AWS and customer networks; configure AWS Virtual Private Gateway and Customer Gateway; coordinate with customer IT on tunnel parameters; monitor tunnel health; handle re‑keying and configuration updates.
• Infrastructure (AWS VPC & Firewall): design and maintain VPC architecture; configure security groups and network ACLs; maintain EC2 instances and compute resources; manage infrastructure changes and expansions.
• Network Routing: internal routing – configure route tables within AWS VPCs; inter‑VPC routing when applicable; VPN routing – configure routes for traffic to customer networks; manage BGP or static routing with customer gateways; troubleshoot routing asymmetry and path issues.
• SNAT over VPN: configure Source NAT for traffic traversing VPN tunnels; handle IP address translation when customer networks have overlapping ranges; troubleshoot NAT‑related connectivity issues.
• Routing‑Related Customer Support: troubleshoot connectivity issues reported by customers; diagnose network path problems with traceroute and packet captures; work with customer IT teams to resolve routing conflicts; act as escalation point for network‑layer issues.
• Additional Functions: provide support to internal and external customers via phone and email within the Service Level Agreement; meet timelines in an on‑time manner; log all activities accurately in the customer support tool.

Qualifications

• Bachelor’s degree in Information Technology, Computer Engineering or equivalent from a two‑year college or technical school; or five years related experience and/or training, or equivalent combination of education and experience.
• Minimum three years working with AWS networking (VPC, VPN, Route 53); hands‑on experience creating and troubleshooting site‑to‑site VPNs; experience with SNAT/NAT configurations over VPN tunnels; comfortable working directly with customer IT teams; experience with security teams on infrastructure compliance; Windows Server patching experience.
• CCNA or equivalent networking foundation required; cloud networking certification or equivalent experience a plus.

Technical Skills

• AWS Networking – VPC, subnets, route tables, security groups, NACLs, VGW, CGW.
• VPN – site‑to‑site VPN, IKE/IPsec configuration, tunnel troubleshooting, SNAT/NAT over VPN.
• DNS – Route 53, DNS record types, TTL management, resolution troubleshooting.
• Routing – static routing, BGP basics, route table design, asymmetric routing diagnosis.
• Firewalls – security group rule design, least privilege access, troubleshooting blocked traffic.
• Network troubleshooting – tcpdump/Wireshark, traceroute, connectivity debugging.
• Monitoring – DataDog, Solar Winds, Prometheus, PRTG.

Soft Skills

• Problem‑solving mindset with attention to detail.
• Clear, empathetic communication with both technical and non‑technical audiences.
• Coordination with external IT teams; seamless collaboration with developers, DevOps, IT, and internal security teams.
• Maintaining accurate records of configurations, changes, and incident summaries.
• Calm incident response during outages and ensuring timely resolution.
• Providing technical leadership, mentoring peers, and promoting cloud best practices.
• Thriving in fast‑paced, agile environments with evolving priorities.

Other Work Conditions

• Willing to work on shifting operations, including weekends with scheduled days off.
• Able to provide on‑call support on weekends or off‑hours to address critical issues.
• Capable of functioning independently while maintaining a positive energy level in a constantly shifting environment.

Competency Profile

• Customer Focus
• Action Oriented
• Drives Results
• Collaborates
• Plans and aligns
• Analysis/Problem Solving
• Judgement/Decision making
• Flexibility and Adaptability

Equal Opportunity Employer

Copeland is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, age, marital status, political affiliation, sexual orientation, gender identity, genetic information, disability or protected veteran status. We are committed to providing a workplace free of discrimination or harassment.