Senior Cloud Network Engineer

Radiant Dev; Golden (CO); On-site; USD 160,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Flexible PTO

11 holidays

Parental leave

401(k) with company match

Professional development support

Job summary

Radiant Dev LLC. seeks a Senior Cloud Network Engineer to design, secure, and operate cloud network architectures primarily across AWS with secondary Azure environments. You will drive strict network segmentation, client VPN integrations, and compliance evidence collection for SOC 2 Type II and PCI DSS.

Responsibilities include deploying network changes entirely as code via Terraform/OpenTofu pipelines, maintaining observability, and participating in on-call rotations for network reliability.

Qualifications

• Bachelor’s degree in CS or equivalent practical experience.
• 5+ years hands-on cloud networking in cloud-native or hybrid setups.
• Strong in AWS networking components and Azure knowledge.
• Experience with IPsec/SSL VPN and routing protocols.
• IaC experience with Terraform or OpenTofu.
• Track record in SOC 2 / PCI DSS audit evidence.

Responsibilities

• Design, secure, operate network architectures across AWS/Azure.
• Implement 100% IaC via OpenTofu/ Terraform with peer reviews.
• Manage VPCs, VNets, and Transit gateways with strict segmentation.
• Own client VPN onboarding and secure connectivity.
• Lead compliance evidence collection and incident response.

Skills

Cloud networking

AWS networking

Azure networking

IPsec/SSL VPN design

Terraform / OpenTofu

Scripting (Python, Bash/PowerShell)

Networking protocols (BGP, OSPF)

Security & compliance

Education

Bachelor’s degree in Computer Science (or equivalent)

Tools

Terraform/OpenTofu

Wireshark

tcpdump

mtr

iperf

AWS CLI

Azure CLI

GitHub Actions

Job description

• Salary Range: $160,000 – $180,000 / year (DOE) + 10% bonus potential
• Benefits: Comprehensive medical/dental/vision/life coverage, flexible PTO, 11 holidays, parental leave, immediately vested 401(k) with company match, and professional development support.

Role Summary

We are seeking a Senior Cloud Network Engineer to design, secure, and operate network architectures primarily across AWS (with secondary Azure environments). This role is responsible for driving strict network segmentation, client VPN integrations, compliance evidence collection (SOC 2 Type II, PCI DSS), and managing all network infrastructure purely as code via peer-reviewed Terraform/OpenTofu pipelines.

Key Responsibilities

• Cloud Architecture & Routing: Architect and manage VPCs, VNets, and Transit Gateways across AWS and Azure; enforce strict deny-by-default separation between production and non-production environments.
• Client VPN & Secure Connectivity: Own end-to-end onboarding and maintenance of IPsec (IKEv2) and SSL/TLS tunnels with enterprise clients; lead technical troubleshooting calls and write Root Cause Analyses (RCAs).
• Infrastructure as Code (IaC): Deliver 100% of network changes via code—authoring reusable OpenTofu/Terraform modules through peer-reviewed pull requests (no console changes in production).
• Security & Compliance: Implement and audit network controls for SOC 2 Type II and PCI DSS; conduct recurring firewall/NACL reviews and collaborate on threat modeling and incident response.
• Operations & Reliability: Maintain network observability, build health alerts and runbooks, and participate in an on-call rotation for network incidents.

Qualifications

Required

• Education & Experience: Bachelor’s degree in Computer Science (or equivalent practical experience) with 5+ years of hands-on network engineering in cloud-native or hybrid environments.
• Cloud Networking: Deep hands-on expertise in AWS networking (VPC, Transit Gateway, Route 53, Security Groups, NACLs, Network Firewall, IAM, SSM). Working knowledge of Azure networking (or strong AWS with readiness to expand into Azure).
• Protocols & Connectivity: Proven experience designing and supporting enterprise IPsec/SSL VPN tunnels, BGP, OSPF, and routing policy.
• Infrastructure as Code: Proven experience authoring reusable Terraform or OpenTofu modules.
• Compliance: Hands-on experience implementing network controls and collecting audit evidence for SOC 2 and/or PCI DSS.
• Troubleshooting & Scripting: Strong packet-level analysis skills (Wireshark, tcpdump, mtr, iperf) and scripting fluency in Python, Bash/PowerShell, and AWS/Azure CLIs.

Preferred

• Relevant certifications: AWS Advanced Networking Specialty, Azure Network Engineer Associate, CCNP, or equivalent.
• Background in financial services or regulated environments.
• Experience with network observability (VPC Flow Logs, Datadog, Grafana) and CI/CD pipelines (Harness, GitHub Actions).
• Exposure to Kubernetes networking (CNI, ingress, service mesh), ZTNA, or WAF/DDoS protection (AWS Shield/WAF).
• Experience using modern AI coding assistants (GitHub Copilot, Cursor, Claude) to accelerate module authoring and documentation.