Senior Cloud Network Engineer

Redhorse Corporation; Warrenton (VA); On-site; USD 140,000 - 195,000; Full time

Job summary

Redhorse Corporation seeks a Cloud Network Architect/Engineer to support a critical government client. You will design and integrate hybrid networks across on-prem data centers with AWS and Azure to enable secure, scalable operations.

Role requires hands-on AWS/Azure networking, VPCs, ExpressRoute, and firewall services, plus a Top Secret clearance and a strong enterprise data center background. You will implement high availability, DR, and security controls in a collaborative team environment.

Qualifications

• Bachelor's degree in Computer Science, Electrical Engineering, or a related STEM field.
• 8+ years of professional experience as a network engineer managing enterprise data center or service provider networks.
• 3+ years of hands-on experience designing and deploying network architecture within AWS and Microsoft Azure.
• 3+ years of experience with datacenter network fabric technologies such as MLAG, VPC, VXLAN, MP-BGP, or Cisco ACI.
• Advanced understanding of routing protocols including BGP, OSPF, and EIGRP, specifically regarding hybrid cloud routing.
• Solid understanding of TCP/IP, Ethernet, and fault‑tolerant networking using Cisco technology.

Responsibilities

• Design and architect hybrid network solutions integrating on-premises data centers with AWS and Azure cloud environments.
• Develop and implement high-availability and redundancy strategies, including failover, load balancing, and disaster recovery in multi-region environments.
• Design and manage AWS networking services including VPCs, Transit Gateway, Direct Connect, Route 53, and Network Firewall.
• Configure and maintain Azure networking services including Virtual Networks (VNet), ExpressRoute, VPN Gateway, and Azure Firewall.
• Support and optimize legacy on-premises infrastructure including Cisco NCS routers and Cisco Nexus switches using NX-OS and Cisco ACI.
• Manage security hardware and integrations including Forcepoint firewalls and General Dynamics TACLANE devices.
• Collaborate with security teams to implement identity and access controls using RSA and Cisco ISE.
• Implement cloud security best practices, ensuring solutions comply with Key Control Policies and Information Security Office standards.
• Develop and maintain architecture artifacts, including Layer 1/2/3 detail designs and cloud network diagrams.
• Conduct technical analyses of engineering documentation and installation plans for complex communication systems.
• Test and validate security patches, cloud firmware updates, and software upgrades in a lab environment before production rollout.
• Provide occasional support outside normal business hours for incident response and maintenance windows.

Skills

Hybrid cloud routing

TCP/IP

BGP/OSPF/EIGRP

Network design

Python/Bash scripting

IaC (Terraform/Ansible/CF)

AWS/Azure design

Education

Bachelor's degree in Computer Science, Electrical Engineering, or related STEM field

Tools

AWS

Azure

Cisco ACI

NX-OS

ExpressRoute

VPN Gateway

Direct Connect

RSA ISE

Job description

About the Organization

Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.

About the Role

Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a Cloud Network Architect/Engineer to support a critical government customer. This role is essential to our client’s digital transformation, serving as the primary bridge between legacy on-premises data centers and modern, scalable cloud environments in AWS and Azure. As part of a high-performance team, you will design and integrate the robust physical and virtual networks that enable secure, mission-critical infrastructure. Your work will directly impact the reliability and security of the client’s enterprise environment, ensuring they can leverage modern technology to meet complex mission demands.

Key Responsibilities

• Design and architect hybrid network solutions integrating on-premises data centers with AWS and Azure cloud environments.
• Develop and implement high-availability and redundancy strategies, including failover, load balancing, and disaster recovery in multi-region environments.
• Design and manage AWS networking services including VPCs, Transit Gateway, Direct Connect, Route 53, and Network Firewall.
• Configure and maintain Azure networking services including Virtual Networks (VNet), ExpressRoute, VPN Gateway, and Azure Firewall.
• Support and optimize legacy on-premises infrastructure including Cisco NCS routers and Cisco Nexus switches using NX-OS and Cisco ACI.
• Manage security hardware and integrations including Forcepoint firewalls and General Dynamics TACLANE devices.
• Collaborate with security teams to implement identity and access controls using RSA and Cisco ISE.
• Implement cloud security best practices, ensuring solutions comply with Key Control Policies and Information Security Office standards.
• Develop and maintain architecture artifacts, including Layer 1/2/3 detail designs and cloud network diagrams.
• Conduct technical analyses of engineering documentation and installation plans for complex communication systems.
• Test and validate security patches, cloud firmware updates, and software upgrades in a lab environment before production rollout.
• Provide occasional support outside normal business hours for incident response and maintenance windows.

Required Experience/Clearance

• An active Top Secret (TS) security clearance is required.
• Bachelor’s degree in Computer Science, Electrical Engineering, or a related STEM field.
• 8+ years of professional experience as a network engineer managing enterprise data center or service provider networks.
• 3+ years of hands‑on experience designing and deploying network architecture within AWS and Microsoft Azure.
• 3+ years of experience with datacenter network fabric technologies such as MLAG, VPC, VXLAN, MP‑BGP, or Cisco ACI.
• Advanced understanding of routing protocols including BGP, OSPF, and EIGRP, specifically regarding hybrid cloud routing.
• Solid understanding of TCP/IP, Ethernet, and fault‑tolerant networking using Cisco technology.

Desired Experience

• Experience with Infrastructure as Code (IaC) using Terraform, Ansible, or CloudFormation.
• Proficiency in Python or Bash for automating network tasks and API integration with Cisco ACI.
• AWS Certified Advanced Networking – Specialty certification.
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) certification.
• Cisco Certified Network Professional (CCNP) in Enterprise or Data Center.
• Experience working in a government-contracting environment with high-security requirements.

$140,000 - $195,000 a year

The salary range provided for this position represents the anticipated base salary for successful candidates. Actual compensation will be determined based on a variety of factors, including relevant experience, education, certifications, skills, security clearance level, geographic location, market conditions, and internal equity. In addition to base salary, eligible employees may participate in Redhorse’s comprehensive benefits programs and may be eligible for performance-based or other incentive compensation, where applicable.

Redhorse Corporation is an equal opportunity employer. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or any other protected class.

If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Talent Acquisition at [e-mail]

Redhorse Corporation shall, in its discretion, modify or adjust the position to meet Redhorse’s changing needs.This job description is not a contract and may be adjusted as deemed appropriate in Redhorse’s sole discretion.