Cloud Network Engineer – W2 Only

Symphony Corporation; Dallas (TX); On-site; USD 120,000 - 150,000; Full time

Job summary

Citi is seeking a Cloud Network Engineer in Dallas to design, implement, and manage scalable network architectures across AWS and Google Cloud, integrated with on-premise systems. You will build secure, multi-cloud network platforms with IaC, ensuring reliability and performance.

You will drive connectivity, security, and automation efforts, collaborating with cross-functional teams to enable developers while maintaining operational excellence in a hybrid cloud environment.

Qualifications

• Public cloud network certifications (AWS Advanced Networking - Specialty, GCP Professional Network Engineer).
• Experience with network security tools such as WAF, DDoS protection, and IDS/IPS.
• Familiarity with SDN concepts.
• Experience with container networking (Kubernetes CNI, service mesh).
• Knowledge of PCI DSS, NIST, ISO 27001 for financial services.
• Experience with network performance testing and optimization tools.

Responsibilities

• Multi-Cloud Network Architecture & Engineering: Design, implement, and manage advanced network architectures across AWS and GCP.
• Hybrid Cloud Connectivity: Establish secure connectivity between on-premise data centers and clouds using Direct Connect, Interconnect, VPNs, and SD-WAN.
• Network as Code (NaC) & IaC: Use Terraform, CloudFormation, Deployment Manager for network deployments.
• Advanced Network Services: Configure DNS, Load Balancing, API Gateways, and CDNs.
• Network Automation & Orchestration: Automate provisioning and management; develop scripts (Python, Go, Bash).
• Site Reliability Engineering for Networks: Monitoring, alerting, on-call rotations for network services.
• Network Security Implementation: Enforce NACLs, security groups, firewalls, and IDS/IPS; ensure compliance.
• Troubleshooting & Optimization: Resolve issues across hybrid/multi-cloud environments.

Skills

Cloud certifications

Network security tools

SDN concepts

Container networking

Compliance frameworks

Performance testing tools

Tools

Terraform

CloudFormation

Deployment Manager

Route 53

Cloud DNS

ALB/NLB

Job description

Cloud Network Engineer

Dallas TX

W2 Only - CITIZENS / PERMANENT RESIDENTS ONLY

Preferred Qualifications & Skills

• Public cloud provider network-specific certifications (e.g., AWS Certified Advanced Networking - Specialty, Google Cloud Professional Network Engineer).
• Experience with network security tools such as WAF, DDoS protection, and network intrusion detection/prevention systems.
• Familiarity with network virtualization and software-defined networking (SDN) concepts.
• Experience with container networking (e.g., Kubernetes CNI, service mesh).
• Knowledge of compliance frameworks relevant to financial services (e.g., PCI DSS, NIST, ISO 27001).
• Experience with network performance testing and optimization tools.

Cloud Network Engineer on the Public Cloud team, you will be a critical enabler of Citi's cloud transformation journey, with a specialized focus on designing, implementing, and managing complex network architectures across our multi-cloud environment (AWS and Google Cloud) and integrating them seamlessly with our on-premise infrastructure. Our team is dedicated to evolving Citi's application and data hosting environments into an integrated, hybrid multi-cloud ecosystem. We focus on building, automating, and optimizing the foundational cloud network infrastructure and services that empower developers to innovate rapidly and securely. In this role, you will design, implement, and maintain scalable, resilient, and secure cloud network platforms and solutions, embodying a you build it, you run it philosophy to ensure operational excellence.

Key Responsibilities

• Multi-Cloud Network Architecture & Engineering: Design, implement, and manage advanced network architectures across AWS and Google Cloud Platform, including VPC/VNet design, subnetting, routing, IP addressing schemes, and network segmentation.
• Hybrid Cloud Connectivity: Establish and maintain robust, high-performance, and secure connectivity between on-premise data centers and public cloud environments using technologies such as AWS Direct Connect, Google Cloud Interconnect, VPNs, and SD-WAN integration.
• Network as Code (NaC) & IaC: Develop, maintain, and optimize cloud network infrastructure using Infrastructure as Code (IaC) tools such as Terraform, CloudFormation (AWS), and Deployment Manager (Google Cloud Platform). Create reusable modules and blueprints for standardized network deployments.
• Advanced Network Services: Configure and manage critical network services including DNS (Route 53, Cloud DNS), Load Balancing (ALB, NLB, Cloud Load Balancing), API Gateways, and Content Delivery Networks (CDNs).
• Network Automation & Orchestration: Automate the provisioning, configuration, and management of cloud network resources and services. Develop scripts and tools (e.g., Python, Go, Bash) to streamline network operations, ensure consistency, and improve efficiency.
• Site Reliability Engineering (SRE) for Networks: Embrace a you build it, you run it mindset for network services. Take ownership of the reliability, performance, and availability of the cloud network platforms. Implement robust network monitoring, alerting, and logging solutions, and participate in on-call rotations to ensure rapid incident response and resolution for network-related issues.
• Network Security Implementation: Implement and enforce network security best practices, including network access control lists (NACLs), security groups, cloud firewalls (AWS WAF, Google Cloud Platform Firewall Rules), and network intrusion detection/prevention systems. Ensure compliance with Citi's policies, industry standards, and regulatory requirements.
• Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimization across hybrid and multi-cloud environments.
• Documentation & Knowledge Sharing: Create and maintain comprehensive documentation for cloud network architectures, configurations, and operational procedures. Mentor junior engineers and contribute to knowledge sharing within the team