Senior Cloud & Network Architect – AWS, PCI

Visa Hunt; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Vesta Corporation is seeking a Senior Network Engineer to lead design, implementation, and operations of a global enterprise network. The role spans on-premises, hybrid cloud, and PCI compliance, with 10+ years of hands-on experience and strong AWS network skills.

The selected candidate will work across data centers, remote sites, and cloud environments, managing VPNs, firewall platforms, F5 BIG-IP, and DNS services while supporting audits and cost optimization.

Qualifications

• 10+ years of hands-on enterprise networking experience in large-scale, multi-site environments.
• Expert-level Cisco routing and switching: IOS/NX-OS, BGP, OSPF, EIGRP, VLANs, STP, QoS.
• Firewall administration: Cisco ASA/FTD, pfSense, and Check Point with segmentation and change control.
• F5 BIG-IP LTM/GTM: virtual servers, pools, iRules, traffic policies.
• Cloudflare DNS/WAF security policy administration; PCI DSS alignment.

Responsibilities

• Design, implement, and maintain scalable network infrastructure across data centers, remote sites, and cloud environments.
• Manage and tune firewall platforms in alignment with PCI DSS requirements.
• Administer F5 BIG-IP LTM/GTM for load balancing and traffic steering.
• Maintain AWS VPCs, VPNs, DNS (Route 53) and NAT configurations.
• Support PCI DSS and SOC 1 Type 2 audits with documentation and evidence.

Skills

Enterprise networking

Cisco routing

Firewall administration

F5 BIG-IP

Cloudflare

FireMon

VPC networking

AWS networking

DNS management

Education

Bachelor's degree in IT

CCNP certification

Tools

Proxmox VE

Terraform

NetBox

CloudFormation

Azure networking

Job description

Vesta Corporation is seeking a Senior Network Engineer to lead design, implementation, and operations of a global enterprise network. The role spans on-premises, hybrid cloud, and PCI compliance, with 10+ years of hands-on experience and strong AWS network skills.

The selected candidate will work across data centers, remote sites, and cloud environments, managing VPNs, firewall platforms, F5 BIG-IP, and DNS services while supporting audits and cost optimization.