Cloud Network Engineer – Zero Trust & Multi-Cloud

TechSur Solutions; Reston (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

TechSur Solutions in the DC metropolitan area seeks a Cloud Network Engineer to design and run the network connecting a federal customer's private cloud, data centers, and four public clouds. You will build hub-and-spoke topologies, interconnects, and firewall policies implementing Zero Trust.

You will work with cloud engineers, security specialists, and customer network teams to deliver secure, observable, and resilient connectivity in production.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• At least 5 years of network engineering experience, including cloud networking in at least one major cloud provider.
• Hands-on experience creating and managing firewall policies in cloud-native and/or next-generation firewalls.
• Experience provisioning dedicated cloud connections (Direct Connect, ExpressRoute, Cloud Interconnect, or FastConnect) and IPsec VPNs.
• Strong working knowledge of BGP, TCP/IP, subnetting, routing, load balancing, and DNS.
• Experience implementing Zero Trust network architecture or segmentation.
• Ability to obtain and maintain the background investigation required by the federal customer.

Responsibilities

• Design and implement hub-and-spoke network architectures across AWS, Azure, GCP, and OCI, integrated with the customer's WAN and DNS services.
• Provision and manage dedicated connections and VPNs: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect, and IPsec site-to-site VPN.
• Configure BGP routing, route tables, transit gateways, and failover between on-premises data centers and cloud regions.
• Create and maintain firewall policies, security groups, and network segmentation for production, integration, development, and sandbox environments.
• Implement Zero Trust network controls (micro‑segmentation, private endpoints, identity‑aware access) aligned with NIST SP 800-207 and customer security standards.
• Build network configurations as code with Terraform and track changes through ServiceNow change management.
• Monitor network performance and flows with CSP-native tools (VPC Flow Logs, Network Watcher, Network Intelligence Center, OCI Network Path Analyzer) and forward events to Splunk.
• Troubleshoot connectivity, latency, and DNS issues and support incident response as part of 24/7 operations.
• Document network designs, runbooks, and diagrams, and provide evidence for ATO packages.

Skills

Cloud networking

WAN design

BGP routing

Zero Trust

Terraform

Ansible

Firewall policy management

Multi-cloud

Education

Bachelor's degree in Computer Science/IT/Engineering

Tools

Terraform

Ansible

AWS

Azure

GCP

OCI

Job description

TechSur Solutions in the DC metropolitan area seeks a Cloud Network Engineer to design and run the network connecting a federal customer's private cloud, data centers, and four public clouds. You will build hub-and-spoke topologies, interconnects, and firewall policies implementing Zero Trust.

You will work with cloud engineers, security specialists, and customer network teams to deliver secure, observable, and resilient connectivity in production.