Remote Cloud Network Architect - AWS/Azure Lead

Eliassen Group; Madison (WI); Remote; USD 74,000 - 124,000; Part time

Benefits offered by this job

Medical, Dental, and Vision benefits

401k with company matching

Life insurance

Job summary

Eliassen Group in the United States is seeking a Staff Cloud Network Engineer to lead secure, resilient cloud and hybrid network architectures across AWS and Azure. You will design hub-and-spoke patterns, deploy firewalls, and automate infrastructure using Terraform.

Collaborate with Cloud, Platform, Infrastructure, Security, and Application teams to standardize connectivity, improve performance, and enhance observability for global environments; this is a remote, W2-based contract role.

Qualifications

• 8+ years designing, implementing, and supporting complex production network environments with significant cloud networking responsibilities.
• Advanced hands-on experience with AWS and Azure networking, with deep expertise in at least one.
• Design experience for multi-region, multi-account, or multi-subscription architectures and resilient hybrid connectivity using Direct Connect, ExpressRoute, Transit Gateway, Cloud WAN, Virtual WAN, and site-to-site VPN.
• Hands-on deployment and management of Palo Alto Networks firewalls in AWS and Azure, including Cloud NGFW or VM-Series and Panorama.
• Expert understanding of BGP, routing policy, segmentation, firewalls, VPNs, redundancy, and failure scenarios.
• Significant experience building and maintaining production infrastructure with Terraform.
• Experience developing network automation with Python, Ansible, or equivalent.
• Experience with Git-based workflows, peer review, automated testing, and CI/CD.

Responsibilities

• Lead design, implementation, and evolution of secure, highly available network architectures across AWS and Azure, including government and commercial environments.
• Architect multi-region, multi-account, and multi-subscription connectivity using AWS Transit Gateway, Cloud WAN, Direct Connect, and Azure Virtual WAN, Virtual Hub, and ExpressRoute.
• Develop standardized designs for routing, segmentation, centralized inspection, internet egress, private connectivity, DNS, and hybrid connectivity.
• Design and deploy Palo Alto Networks Cloud NGFW and VM-Series firewalls with high availability, routing, load-balancer integration, centralized management, and symmetric traffic flows.
• Integrate public cloud networks with data centers, offices, and mission environments using resilient routing, VPN, private circuits, and hybrid connectivity patterns.
• Build reusable infrastructure as code with Terraform and develop network automation using Python, Ansible, or equivalent.
• Establish Git-based workflows and CI/CD for review, validation, testing, and deployment of network changes.
• Partner with engineering teams to deliver standardized network services, reusable modules, and self-service capabilities.
• Evaluate emerging cloud networking technologies and recommend improvements based on scalability, resiliency, security, operations, and cost.
• Lead complex cloud and hybrid network changes and provide advanced troubleshooting for routing, connectivity, firewall, DNS, performance, and application-access issues.
• Develop automated validation, monitoring, compliance, and observability to identify configuration, connectivity, reliability, performance, capacity, and security risks.
• Execute network and firewall changes aligned with security policies, change control, and engineering standards.
• Create and maintain architecture diagrams, standards, configuration documentation, runbooks, and troubleshooting procedures.
• Mentor engineers on cloud networking, infrastructure as code, automation, and advanced troubleshooting, and communicate recommendations, risks, and tradeoffs.
• Coordinate with vendors and participate in on-call rotations, maintenance windows, and emergency response when required.
• Lead lifecycle management for cloud connectivity, virtual network appliances, firewalls, and platforms, including upgrades, licensing, vulnerability remediation, and risk reduction.
• Identify manual processes and technical debt and replace them with scalable, supportable, automated solutions.

Job description

Eliassen Group in the United States is seeking a Staff Cloud Network Engineer to lead secure, resilient cloud and hybrid network architectures across AWS and Azure. You will design hub-and-spoke patterns, deploy firewalls, and automate infrastructure using Terraform.

Collaborate with Cloud, Platform, Infrastructure, Security, and Application teams to standardize connectivity, improve performance, and enhance observability for global environments; this is a remote, W2-based contract role.