Cloud Network Engineer

trexsolutions; United States; Remote; USD 100,000 - 145,000; Full time

Benefits offered by this job

PTO

Parental leave

Health coverage

Dental coverage

Vision coverage

Training budget

401(k) match

Job summary

trexsolutions is seeking a Cloud Network Engineer to join a federal cloud program delivering enterprise-wide multi-cloud infrastructure for a cabinet-level government client. You will design, deploy, and sustain network services across Azure, OCI, and related platforms, partnering with existing admins to keep mission traffic secure and highly available.

Responsibilities include configuring Palo Alto firewalls, VPNs, and CSR devices; deploying Terraform and IaC; designing VPCs; applying patches

Qualifications

• U.S. citizenship with the ability to obtain a Public Trust clearance.
• Bachelor's degree plus seven or more years of relevant experience, or a Master's plus four or more years.
• Strong hands-on expertise with Terraform and EKS clusters in production environments.
• Experience configuring Palo Alto firewalls and Cisco IPsec (AES 256), IPS, route-maps, and network ACLs.
• Working knowledge of TCP/IP standards (IEEE 802.1) and protocols such as DNS, DHCP, TFTP, NAT, VPN, BGP, OSPF, and SSL.
• Familiarity with DoD STIGs and Information Assurance Vulnerability Management (IAVM).

Responsibilities

• Configure, install, and support network infrastructure including Palo Alto firewalls, Cisco VPN concentrators, and Cisco CSR devices alongside cloud-native services in Azure and OCI.
• Engineer and deploy network components using Terraform and infrastructure-as-code practices, including automated AWS security group rollouts.
• Design Virtual Private Clouds, subnets, and software-defined networks that satisfy both performance and security requirements.
• Apply patches, service packs, hot fixes, and security configurations to third‑party network devices operating in cloud environments.
• Monitor availability, performance trends, and capacity, surfacing corrective actions before issues impact users.
• Deliver Level 2 and Level 3 troubleshooting for firewalls, routers, VPN concentrators, and access control issues, including participation in a 24/7 on‑call rotation.

Skills

Citizenship & clearance readiness

Security-minded

Analytical thinking

Team collaboration

Education

Bachelor's degree + 7+ years experience

Master's degree + 4+ years

Tools

Terraform

EKS clusters

Palo Alto firewalls

IPsec AES-256

Network ACLs

BGP/OSPF

DNS/DHCP/TFTP

Job description

Role overview

Join a federal cloud program delivering enterprise-wide multi-cloud infrastructure for a cabinet-level government client. The Cloud Network Engineer designs, deploys, and sustains network services across Azure, OCI, and adjacent platforms, partnering with existing administrators to keep mission traffic secure and highly available.

Responsibilities

• Configure, install, and support network infrastructure including Palo Alto firewalls, Cisco VPN concentrators, and Cisco CSR devices alongside cloud-native services in Azure and OCI
• Engineer and deploy network components using Terraform and infrastructure-as-code practices, including automated AWS security group rollouts
• Design Virtual Private Clouds, subnets, and software-defined networks that satisfy both performance and security requirements
• Apply patches, service packs, hot fixes, and security configurations to third‑party network devices operating in cloud environments
• Monitor availability, performance trends, and capacity, surfacing corrective actions before issues impact users
• Deliver Level 2 and Level 3 troubleshooting for firewalls, routers, VPN concentrators, and access control issues, including participation in a 24/7 on‑call rotation

Requirements

• U.S. citizenship with the ability to obtain a Public Trust clearance
• Bachelor's degree plus seven or more years of relevant experience, or a Master's plus four or more years
• Strong hands‑on expertise with Terraform and EKS clusters in production environments
• Experience configuring Palo Alto firewalls and Cisco IPsec (AES 256), IPS, route‑maps, and network ACLs
• Working knowledge of TCP/IP standards (IEEE 802.1) and protocols such as DNS, DHCP, TFTP, NAT, VPN, BGP, OSPF, and SSL
• Familiarity with DoD STIGs and Information Assurance Vulnerability Management (IAVM)

Nice to have

• Azure Fundamentals, GCP, or Oracle Cloud certifications
• CCNP or higher credentials, with CCIE and CISSP especially valued
• Palo Alto Networks Certified Network Security Engineer (PCNSE)

Benefits and work setup

• Annual base salary range of $100,000 to $145,000, with final offer influenced by scope, experience, and market factors
• Generous PTO available immediately upon joining, plus paid parental leave
• Individual and family health, vision, and dental coverage
• Annual training, professional development, and tuition reimbursement budget
• 401(k) plan with company match that is fully vested after 60 days of employment