Staff Cloud Network Engineer

Yoh,-A-Day-; San Diego (CA); On-site; USD 116,000 - 165,000; Full time

Benefits offered by this job

Medical benefits

HSA

Life & Disability Insurance

401K Retirement Savings Plan

Certification and training

Job summary

Yoh, a Day & Zimmermann company, is seeking a Staff Cloud Network Engineer to lead architecture and implementation of scalable cloud networking across AWS, Azure, and hybrid environments. The role focuses on secure connectivity, automation via Terraform, and collaboration with cross-functional teams.

The ideal candidate brings 8+ years in enterprise/networking with strong cloud experience in AWS and Azure, plus hands-on skills in Direct Connect, ExpressRoute, and Palo Alto Cloud NGFW.

Qualifications

• 8+ years designing and supporting complex networking, with cloud focus.
• Advanced hands-on cloud networking across AWS and Azure.
• Experience multi-region/multi-account cloud networks.

Responsibilities

• Lead architecture and implementation of highly available network environments (AWS, Azure, data centers).
• Design scalable cloud connectivity across regions and accounts using Transit Gateway, Cloud WAN, Direct Connect, ExpressRoute.
• Establish architecture standards for routing, DNS, private connectivity, secure internet access.
• Design and deploy Palo Alto Networks security in cloud (Cloud NGFW/VM-Series).
• Integrate cloud with sites and data centers using resilient routing and VPNs.
• Build reusable Terraform modules for network deployment and automation workflows.

Skills

AWS

Azure

Hybrid cloud

Network engineering

Terraform

Python

Ansible

CI/CD

Education

Bachelor's degree in relevant field

Tools

Terraform

Palo Alto NGFW

ExpressRoute

Direct Connect

Virtual WAN

Cloud NGFW

Job description

Yoh has an exciting, contract opportunity for a Staff Cloud Network Engineer to join our advanced technology client. This role is ideal for a senior‑level cloud networking professional who can provide hands‑on technical leadership across complex AWS, Azure, hybrid cloud, and enterprise network environments.

The position will focus on designing secure and resilient cloud connectivity, implementing network automation and infrastructure as code, and providing technical direction across cloud and network initiatives. Candidates should be within a commutable distance of the greater San Diego or Los Angeles, CA area and comfortable with occasional travel as needed.

Title: Staff Cloud Network Engineer

Location: Greater San Diego or Los Angeles, CA area

Type: Contract

Compensation: $95.00–$130.00/hour, depending on experience level

Eligibility: Must be a U.S. Person as defined by ITAR due to access to export‑controlled technical data and/or technology

Responsibilities

• Lead the architecture, implementation, and ongoing improvement of highly available network environments spanning AWS, Azure, data centers, and enterprise locations.
• Design scalable cloud connectivity across multiple regions, accounts, and subscriptions using technologies such as AWS Transit Gateway, Cloud WAN, Direct Connect, Azure Virtual WAN, Virtual Hub, and ExpressRoute.
• Establish architecture standards for routing, segmentation, DNS, private connectivity, secure internet access, centralized inspection, and hybrid networking.
• Design and deploy Palo Alto Networks security solutions within public cloud environments, including Cloud NGFW and VM-Series firewalls.
• Integrate cloud environments with corporate sites, data centers, and other infrastructure using resilient routing, VPN, and private connectivity solutions.
• Build and maintain reusable Terraform modules and infrastructure-as-code solutions for network deployment and configuration.
• Develop network automation using Python, Ansible, or similar technologies to reduce manual processes and improve operational consistency.
• Implement Git-based development and CI/CD practices for validating, reviewing, testing, and deploying network changes.
• Partner with Cloud, Platform, Infrastructure, Security, and application engineering teams to develop standardized and reusable networking capabilities.
• Lead advanced troubleshooting of routing, firewall, DNS, connectivity, application access, and network performance issues.
• Develop monitoring and automated validation capabilities to proactively identify availability, capacity, configuration, performance, and security risks.
• Lead complex production network changes while adhering to established security and change‑management requirements.
• Maintain network architecture diagrams, engineering standards, runbooks, configuration documentation, and troubleshooting procedures.
• Provide technical mentorship and guidance to other engineers across cloud networking, automation, infrastructure as code, and troubleshooting.
• Support network technology lifecycle management, including upgrades, vulnerability remediation, licensing, configuration improvements, and technical debt reduction.
• Participate in scheduled maintenance, on‑call rotations, vendor escalations, and emergency response as required.

Qualifications

• 8+ years of experience designing and supporting complex enterprise or production networking environments, with significant experience in cloud networking.
• Advanced hands‑on networking experience across both AWS and Azure, with deep expertise in at least one platform.
• Experience architecting multi‑region, multi‑account, and/or multi‑subscription cloud networks.
• Strong hands‑on knowledge of technologies such as Direct Connect, ExpressRoute, Transit Gateway, Cloud WAN, Virtual WAN, and site‑to‑site VPNs.
• Experience deploying and managing Palo Alto Networks firewalls in AWS and Azure, including Cloud NGFW and/or VM‑Series and centralized management through Panorama.
• Expert‑level understanding of BGP, routing, segmentation, firewalls, VPNs, redundancy, and network failure scenarios.
• Strong background in enterprise routing, switching, network security, and hybrid cloud/data‑center connectivity.
• Significant hands‑on experience building production infrastructure using Terraform.
• Experience automating network operations with Python, Ansible, or comparable technologies.
• Experience with Git, peer‑review workflows, automated testing, and CI/CD.
• Demonstrated ability to lead complex networking initiatives from architecture and design through implementation and production support.
• Strong troubleshooting, documentation, communication, and technical leadership skills.
• Bachelor's degree in a relevant technical discipline or equivalent professional experience.
• Must qualify as a U.S. Person under applicable ITAR regulations due to the nature of the work and access to export‑controlled information.

Preferred Qualifications

• Experience with cloud‑native network security, private endpoints, centralized traffic inspection, DNS architecture, and secure egress patterns.
• Experience deploying Palo Alto Cloud NGFW or VM‑Series within AWS GovCloud and/or Azure Government environments.
• Experience designing high‑availability firewall architectures, centralized inspection, load‑balancer integrations, and symmetric traffic flows.
• Experience developing reusable Terraform modules or standardized networking services for consumption by other engineering teams.
• Familiarity with Juniper networking, enterprise wireless, Network Access Control, and Zero Trust Network Access technologies.
• Experience partnering closely with Cloud, Platform, DevOps, Infrastructure, and Cybersecurity organizations.
• Relevant certifications such as AWS Certified Advanced Networking – Specialty, Azure Network Engineer Associate, CCNP, JNCIP, PCNSE, or equivalent.
• Previous experience supporting regulated, classified, aerospace, defense, or other mission‑critical technology environments.

Estimated Min Rate: $84.00

Estimated Max Rate: $120.00

What’s In It for You?

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent community that will provide you with access to Yoh’s vast network of opportunities and gain access to this exclusive opportunity available to you.

Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice

Stay Safe During Your Job Search

Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.