Sr. Cloud Network Engineer
JLL
Stand out for this role — generate a tailored resume and cover letter in about a minute.
Job summary
Jones Lang LaSalle (JLL) is seeking a skilled Cloud Network Engineer to oversee network architecture, segmentation deployments, and firewall security across hybrid environments. You will work with Illumio, Guardicore, and Palo Alto to design, implement, and support secure cloud networking in AWS and Azure.
Ideal candidates have 5+ years in network architecture, strong firewall engineering skills, and experience with global, on‑call support.
Qualifications
- Bachelor’s degree in Computer Science, IT, Engineering, or related field.
- Minimum 5 years experience in network architecture or design with a global infrastructure focus.
- Experience with micro‑segmentation tools (Illumio, Guardicore) including policy creation, enforcement, and mapping.
- Strong understanding of firewalls, segmentation frameworks, WAN, SD‑WAN, VPNs, QoS, and zero‑trust concepts.
- Experience with cloud network architecture (AWS, Azure, GCP).
- Experience with network hardware (Cisco, Palo Alto) and segmentation agents.
- Experience operating at enterprise scale across WAN, LAN, Data Center, Cloud, and segmented environments.
- Ability to participate in 24x7 on‑call rotation.
- Strong knowledge of network security best practices and segmentation strategies.
- Excellent communication skills and ability to work in a global team.
- 8+ years of hands‑on networking and network security support.
Responsibilities
- Implementation, upgrades, and support with cloud networking and Palo Alto firewalls in Azure & AWS.
- Design, implement, and maintain micro‑segmentation policies across hybrid workloads.
- Develop segmentation architectures to reduce lateral movement risks.
- Apply zero‑trust segmentation principles across enterprise networks.
- Maintain firewalls and segmentation platforms, monitoring vulnerabilities.
- Optimize network security devices for capacity and performance.
- Document segmentation deployments, policy frameworks, and baselines.
- Collaborate with global IT teams to resolve issues and ensure alignment.
- Define reusable network and micro‑segmentation patterns for branch, data center, and cloud environments.
- Coordinate with Change Management for segmentation changes and firewall updates.
Skills
Education
Tools
Job description
JLL empowers you to shape a brighter way. Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.
Jones Lang LaSalle, an international commercial real estate firm, is seeking a skilled and motivated cloud network engineer with expertise in traditional networking, cloud networking, and micro-segmentation technologies to join our IT team. The successful candidate will be responsible for overseeing network architecture delivery, segmentation deployments, firewall security engineering, and cloud network operations. This includes design, implementation, and support of security frameworks using industry-leading platforms such as Illumio, Guardicore, and Palo Alto. The ideal candidate will have strong experience in network segmentation, security policy design, firewall engineering, cloud networking, and managing complex hybrid environments.
Implementation, Upgrades, Support & Troubleshooting Hands‑on experience with cloud networking, Palo Alto firewalls in Azure & AWS, and segmentation platforms such as Illumio Core/Cloud and Guardicore (Akamai Segmentation).
Implement and maintain micro‑segmentation policies, including application dependency mapping, rule‑set creation, and enforcement across hybrid workloads.
Experience designing and supporting segmentation architectures to enhance security posture and reduce lateral movement risks.
Strong understanding of zero‑trust network segmentation principles and how they apply to enterprise network security.
Extensive experience implementing and maintaining firewalls and staying updated on newly released security vulnerabilities and their impact on the network.
Perform ongoing optimization of network security devices and segmentation platforms to ensure adequate capacity, availability, and scalability.
Implement, troubleshoot, and document network security infrastructures and segmentation deployments, including policy testing, traffic flows, and enforcement validation.
Expertise in modifying firewall rule sets, segmentation rules, changing security policies, whitelisting, content filtering, and troubleshooting traffic flows across firewalls, segmentation tools, routers, and switches.
Strong knowledge of Layer 4–7 app‑aware firewalls and micro‑segmentation traffic policies.
Establish and modify site‑to‑site VPNs and secure connectivity paths for segmented workloads.
Manage threat protection, URL blocking, IOC feeds, routers, switches, segmentation policies, and endpoint enforcement controls.
Periodically monitor firewall and segmentation agent health, performance, and capacity across global environments.
Participate in Change Management processes, including creating change requests, performing peer reviews, validating segmentation change impact, and executing firewall or segmentation modifications.
Develop detailed build and test plans for implementing firewalls and segmentation deployments.
Coordinate with IT teams to ensure standardized network and segmentation configurations, control frameworks, and enforcement practices.
Recommend enhancements to improve network reliability, segmentation accuracy, security posture, and operational performance.
Collaborate globally with IT teams—security, cloud, data center, and application teams—to resolve issues and ensure network/segmentation alignment.
Define reusable network and micro‑segmentation patterns for branch, data center, and cloud environments.
Document segmentation deployments, firewall standards, policy frameworks, and configuration baselines.
Experience with network automation tools such as Ansible, Terraform, Python (e.g., automating policy pushes, firewall rules, segmentation updates).
Wireless network design, support, and troubleshooting.
Understanding of TCP/IP Stack, AD, DNS, DHCP, Routing (BGP, OSPF, VXLAN), and east‑west traffic considerations for segmentation.
Participate in disaster recovery exercises, including validating segmented application recovery paths and connectivity requirements.
Resolve escalations for complex technical problems involving firewalls, segmentation agents, cloud networking, and hybrid routing.
Participate in incident management and problem resolution for global network and segmentation issues.
Design and implement cloud network architectures using best practices, incorporating segmentation and zero‑trust principles.
Experience & Education Bachelor’s degree in Computer Science, IT, Engineering, or related field.
Minimum 5 years experience in network architecture or design, with a global infrastructure focus.
Experience with micro‑segmentation tools (Illumio, Guardicore) including policy creation, enforcement, and application dependency mapping.
Strong understanding of Firewalls, segmentation frameworks, WAN, SD‑WAN, network protocols, subnetting, VPNs, QoS, and zero‑trust concepts.
Experience with cloud network architecture (AWS, Azure, GCP).
Expertise in network hardware (Cisco, Palo Alto, etc.) and segmentation agents.
Experience operating at enterprise scale across WAN, LAN, Data Center, Cloud, and segmented environments.
Ability to participate in 24x7 on‑call rotation.
Strong knowledge of network security best practices and segmentation strategies.
Excellent communication skills and ability to work in a global team.
8+ years of hands‑on networking and network security support.
Hands‑on experience with Palo Alto firewalls, Panorama, and security profiles.
Experience with Illumio segmentation, Guardicore segmentation, or equivalent platforms.
Cloud networking experience with AWS and Azure, including routing, firewalling, and segmentation.
Ability to resolve complex customer and network/segmentation issues.
Strong understanding of infrastructure, firewall engineering, segmentation design, and security architecture.
Strong troubleshooting skills for Palo Alto and segmentation agents.
Experience implementing global network and segmentation solutions.
Experience deploying firewalls and segmentation in cloud, data center, and edge environments.
Knowledge of ITIL processes and change management.
Strong decision‑making and operational leadership skills.
Proven track record of global network designs, firewall/security implementations, and segmentation projects.
Self‑starter with ability to work independently or collaboratively.
At JLL, we make sure that you become the best version of yourself by helping you realise your full potential in a fully entrepreneurial and inclusive work environment.
If you harbour passion for learning and adapting new technologies, JLL will continuously provide you with platforms to enrich your technical domains.
It’s no surprise that JLL has been recognised by the Ethisphere Institute as one of the World’s Most Ethical Companies.
Some of these benefits include:
- 401(k) plan with matching company contributions
- Comprehensive Medical, Dental & Vision Care
- Paid parental leave at 100% of salary
- Paid Time Off and Company Holidays
- Early access to earned wages through Daily Pay
JLL recognises the impact that the workplace can have on your wellness, so we offer a supportive culture and comprehensive benefits package that prioritises mental, physical and emotional health.
At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyse your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you’re pursuing.
Remote – Chicago, IL
130,000.00 – 160,000.00 USD per year
This position does not provide visa sponsorship. Candidates must be authorized to work in the United States without sponsorship.
Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real‑estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely. For more information about how JLL processes your personal data, please view our Candidate Privacy Statement. For additional details please see our career site pages for each country.
For candidates in the United States, please see a full copy of our Equal Employment Opportunity policy here.
Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at HRSCLeaves@jll.com. This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page.
Pursuant to the Arizona Civil Rights Act, criminal convictions are not an absolute bar to employment. Pursuant to Illinois Law, applicants are not obligated to disclose sealed or expunged records of conviction or arrest. Pursuant to Columbia, SC ordinance, this position is subject to a background check for any convictions directly related to its duties and responsibilities. Only job‑related convictions will be considered and will not automatically disqualify the candidate.
California Residents only. If you are a California resident as defined in the California Consumer Privacy Act (CCPA) please view our Supplemental Privacy Statement which describes your rights and disclosures about your personal information. If you are viewing this on a mobile device you may want to view the CCPA version on a larger device. Pursuant to the LosAngelesFairChanceInitiativeforHiringOrdinance, JLL will consider for employment all qualified Applicants, including those with Criminal Histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance.
Pursuant to the SanFranciscoFairChanceOrdinance, we will consider for employment qualified applicants with arrest and conviction records. Accepting applications on an ongoing basis until candidate identified.
For further information, visit jll.com.
We help our people thrive, grow meaningful careers and find a place where they belong. Together, we strive to be exceptional and shape a better world. For over 200years, JLL (NYSE: JLL), a leading global commercial real estate and investment management company, has helped clients buy, build, occupy, manage and invest in a variety of commercial, industrial, hotel, residential and retail properties. A Fortune500® company with operations in over 80countries around the world, our employees bring the power of a global platform combined with local expertise. Driven by our purpose to shape the future of real estate for a better world, we help our clients, people and communities see a brighter waySM.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
