Senior Network Cloud Engineer

ummh; Worcester (MA); On-site; USD 87,000 - 157,000; Full time

Job summary

UMass Memorial Health is seeking a Senior Network Cloud Engineer to design, implement, and manage secure, scalable network infrastructures across cloud and hybrid environments. You will collaborate with Cloud Architects and Security to support solution design, operations, and continuous improvement of network services.

The role requires 5+ years of cloud experience with Azure VNets, routing, DNS, and VPN/Gateway technologies. A bachelor’s degree and key Azure certifications are preferred.

Qualifications

• Bachelor’s degree in computer science, engineering, information technology or related field.
• Azure Administrator Associate (AZ-104) and other Microsoft certifications preferred.
• 5+ years of cloud environment experience.
• Experience designing and operating Azure VNets, routing, peering, and DNS.
• Strong proficiency with Azure VPN Gateway, IPSec/IKE, TLS, BGP.

Responsibilities

• Design, implement, and maintain cloud network architectures (VNets, subnets, routing, peering, endpoints).
• Configure secure connectivity between on-premises data centers and cloud environments.
• Monitor traffic, latency, and throughput; resolve bottlenecks.
• Troubleshoot network issues and perform incident response.
• Create and maintain network diagrams, firewall rules, and runbooks.
• Automate network provisioning using Terraform and ARM templates.

Skills

Cloud engineering

Communication

Problem solving

Collaboration

Education

Bachelor’s degree in CS/Engineering/IT or related field

Azure Administrator Associate (AZ-104)

Azure Network Engineer Associate (AZ-700)

Microsoft Certified: Azure Solutions Architect Expert

Microsoft Certified: Cybersecurity Architect Expert

Microsoft Certified: DevOps Engineer Expert

Tools

Azure

Terraform

ARM templates

DNS

VPN (IPSec/IKE)

BGP

Application Gateway

Front Door

Traffic Manager

Azure Monitor

Log Analytics

Network Watcher

Job description

Are you an internal caregiver, student, or contingent worker/agency worker at UMass Memorial Health?

Exemption Status: Exempt

Hiring Range: $87,276.80 - $157,081.60 Please note that the final offer may vary within this range based on a candidate's experience, skills, qualifications, and internal equity considerations.

Schedule Details: Monday through Friday

Scheduled Hours: 8:00 AM - 4:30 PM

Shift: 1 - Day Shift, 8 Hours (United States of America)

Hours: 40

Cost Center: 99940 - 5980 IS Enterprise Solution Architecture

This position may have a signing bonus available a member of the Recruitment Team will confirm eligibility during the interview process.

Everyone Is a Caregiver

At UMass Memorial Health, everyone is a caregiver - regardless of their title or responsibilities. Exceptional patient care, academic excellence and leading-edge research make UMass Memorial the premier health system of Central Massachusetts, and a place where we can help you build the career you deserve. We are more than 20,000 employees, working together as one health system in a relentless pursuit of healing for our patients, community and each other. And everyone, in their own unique way, plays an important part, every day.

The Senior Network Cloud Engineer is responsible for designing, implementing, and managing secure, scalable, and reliable network infrastructures across cloud and hybrid environments. This role ensures optimal connectivity, high availability, and performance while aligning with enterprise architectural and security standards. The engineer will partner closely with service teams, Cloud Architects, and Security to support solution design, operations, troubleshooting, and continuous improvement of network services.

Major Responsibilities

Cloud & Hybrid Network Architecture

Design, implement, and maintain cloud network architectures including VPCs, VNets, subnets, routing, peering, endpoints, gateways, and load balancers.

Configure and support secure connectivity between on-premises datacenters and cloud environments.

Ensure network reliability and performance through monitoring of traffic flows, latency, and throughput; proactively identify and resolve bottlenecks.

Operations, Troubleshooting & Incident Response

Perform troubleshooting and incident response for network-related issues, collaborating with service providers.

Maintain network health and compliance.

Run compliance and audit reports as required.

Collaboration & Communication

Partner with Cloud Architects and Security teams.

Communicate service health, risks, and performance challenges to service owners and customers.

Documentation & Automation

Create and maintain network topology diagrams, firewall rulebooks, and runbooks.

Automate network resource provisioning using Terraform and ARM templates.

Maintains accurate network documentation and compliance records.

II. Position Qualifications:

License/Certification/Education

Required

Bachelor's degree in computer science, engineering, information technology or related field.

Preferred

Azure Administrator Associate (AZ-104)

Azure Network Engineer Associate (AZ-700)

Additional Microsoft Certifications

• Microsoft Certified: Azure Solutions Architect Expert
• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: DevOps Engineer Expert
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Azure Support Engineer for Connectivity Specialty
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Azure Stack Hub Operator Associate
• Microsoft Certified: Azure Virtual Desktop Specialty

Experience/Skills

Required

5+ years of cloud environment experience.

Experience designing and operating Azure VNets, routing, peering, and DNS.

Strong proficiency with Azure VPN Gateway, IPSec/IKE, TLS, BGP.

Experience with ExpressRoute, Azure Load Balancer, Application Gateway, Front Door, Traffic Manager, Azure Monitor, Log Analytics, and Network Watcher.

Strong communication skills.

Preferred

Cloud Networking Expertise

Advanced proficiency in Azure VNets, routing, gateways, and hybrid connectivity.

Network Protocols & Security

Deep knowledge of TCP/IP, DNS, VPN, IPSec/IKE, TLS, BGP.

Ability to implement and troubleshoot security controls and encryption.

Performance & Reliability Engineering

Skilled in troubleshooting latency, throughput, and traffic flow.

Designs scalable and resilient network architectures.

Automation & IaC

Proficiency with Terraform, ARM templates, and automation of network resources.

Analytical & Problem-Solving Skills

Strong diagnostic reasoning and troubleshooting proficiency.

Collaboration & Communication

Effective communication with stakeholders across technical