Cloud Network Engineer- Remote

BeyondTrust, Inc.; United States; Ibrido; USD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

BeyondTrust, Inc. is seeking a Cloud Network Engineer to extend on‑prem networking into AWS, focusing on FedRAMP-aligned environments. You will work as the primary liaison between Network and Cloud Ops, applying strong technical judgment and operational discipline.

Responsibilities include designing AWS network architectures, maintaining IaC with Terraform/Ansible/Python, and leading CIDR/IPAM remediation. The role requires 3–5 years in network engineering with cloud experience and involves a

Competenze

• 3–5 years total network admin/engineering; 2+ years hands-on AWS cloud networking with VPCs, Transit Gateway, VPN/Direct Connect, Route 53 across hybrid environments.
• 3–5 years experience with Cisco NX‑OS/IOS/IOS‑XE, Dell, Palo Alto equipment.
• CCNA certification or equivalent hands-on experience.
• Experience aligning security controls with ISO 27001, SOC2, FedRAMP.
• Strong ability to produce network diagrams, IPAM records, and runbooks.

Mansioni

• Operate and maintain on-premises and cloud network infrastructure end-to-end across hybrid environments.
• Design and implement AWS network architectures including VPCs, Transit Gateway, VPN/Direct Connect, and Route 53.
• Lead CIDR/IPAM remediation and re-IP work with minimal disruption.
• Serve as liaison between Network and Cloud Ops for design and incident coordination.
• Mentor engineers on cloud networking fundamentals and hybrid connectivity best practices.
• Develop Infrastructure-as-Code and automation using Terraform, Ansible, Python; contribute modules to automation library.
• Participate in 24x7 on-call rotation; resolve Tier-1 and Tier-2 cloud connectivity issues.
• Maintain network diagrams, CIDR/IPAM records, architecture docs and SOPs; provide progress updates.
• Manage vendor relationships for cloud connectivity and network infrastructure procurement.

Conoscenze

AWS cloud networking

VPC design

Transit Gateway

Network liaison

Documentation & runbooks

On-call rotations

Formazione

CCNA or equivalent hands-on

Strumenti

Cisco NX-OS/IOS/IOS-XE

Dell switches

Palo Alto firewalls

Route 53

Direct Connect

Descrizione del lavoro

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.

Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.

The Role

The Cloud Network Engineer extends BeyondTrust's on-premises networking fundamentals into AWS cloud networking, with a primary focus on architecting and operating FedRAMP-aligned environments. The successful candidate demonstrates strong technical judgment, operational discipline, and the ability to apply practical solutions to complex hybrid network engineering challenges, while serving as the primary liaison between the Network and Cloud Ops teams.

What You’ll Do

• Operate and maintain BeyondTrust's on-premises and cloud network infrastructure, including routing/switching changes, datacenter resource changes, and routine firewall/security group changes end-to-end across on-prem and cloud environments; escalated complex or security-sensitive changes to the Sr. Engineer/SecOps.
• Design and implement AWS network architectures, including VPCs, Transit Gateway, VPN, Direct Connect, Route 53, and network security controls, aligned with FedRAMP, ISO 27001, and SOX requirements.
• Lead the CIDR range overlap remediation project by auditing existing on-prem and AWS CIDR allocations, designing a conflict-free addressing plan, and executing remediation/re-IP work with minimal disruption to production traffic.
• Serve as the primary day-to-day liaison between the Network team and Cloud Ops on network design, shared infrastructure changes, and incident coordination.
• Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices, extending networking expertise into AWS environments.
• Develop and maintain Infrastructure-as-Code and automation using Terraform, Ansible, Python, contributing reusable modules to the team's shared automation library.
• Participate in the shared 24x7 on-call rotation, independently resolving Tier-1 and Tier-2 escalations, including cloud connectivity issues.
• Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs, and provide regular progress updates.
• Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement and renewals.
• Work a hybrid or remote schedule depending on geographic proximity to a BeyondTrust office; travel to offices or datacenters as needed (5–10%).

What You’ll Bring

• 3–5 years of total network administration/engineering experience, including 2+ years hands‑on AWS cloud networking work with VPC design, Transit Gateway, VPN/Direct Connect, Route 53, network security controls across hybrid environments.
• Demonstrated proficiency in Administrator/Engineer-level on‑premises networking fundamentals.
• 3-5 hands‑on experience with Cisco NX‑OS/IOS/IOS‑XE, Dell, and Palo Alto equipment.
• CCNA certification or equivalent hands‑on experience
• Experience implementing and maintaining security controls aligned with industry frameworks such as ISO 27001, SOC2, and FedRAMP.
• Strong documentation and organizational skills — demonstrated ability to produce clear network diagrams, IPAM records, and runbooks that hold up under audit.
• Strong analytical and cross‑team communication skills; comfortable operating as a liaison between technical teams with different priorities.

Nice To Have

• CCNP in progress, or equivalent Network Engineer‑level experience.
• Experience with IPAM tooling such asNetBox, phpIPAM, Infoblox, BlueCat.
• Experience with Azure networking services and hybrid connectivity.
• Direct experience supporting a FedRAMP ATO or continuous monitoring (ConMon) process.
• Formal project management or technical project leadership experience.
• Proficiency in dynamic routing protocols (EIGRP, BGP) and in identity and access management services including RADIUS, TACACS+, Duo, Okta, and Cisco ISE.

Better Together

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

About Us

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com.