Staff Cloud Network Engineer

Yoh Services LLC; San Diego (CA); On-site; USD 116,000 - 165,000; Full time

Benefits offered by this job

Medical, Prescription, Dental & Vision

HSA Benefits

401K Retirement Savings

Job summary

Yoh Services LLC seeks a Staff Cloud Network Engineer to lead architecture and hands-on implementation of highly available network environments across AWS, Azure, data centers, and enterprise locations in the Greater San Diego and Los Angeles area.

This contract role requires 8+ years of cloud networking experience, deep expertise in multi-region designs, Terraform IaC, Python automation, and CI/CD practices, with occasional travel and collaboration with cross-functional teams.

Qualifications

• 8+ years designing and supporting complex enterprise or production networks.
• Advanced hands-on cloud networking in AWS and Azure.
• Experience deploying Palo Alto firewalls in cloud environments.
• BGP, routing, and network security expertise.

Responsibilities

• Lead architecture and implementation of high-availability networks across AWS, Azure, data centers.
• Design scalable cloud connectivity across regions/accounts using Transit Gateway and ExpressRoute.
• Develop Terraform modules and IaC for network deployment and automation.
• Implement network security with Palo Alto Cloud NGFW and VM-Series.
• Develop Python/Ansible automation to reduce manual operations.

Skills

Cloud networking

AWS

Azure

Terraform

Python

Ansible

CI/CD

Networking security

Education

Bachelor's degree or equivalent

Tools

Palo Alto Firewalls

Cloud NGFW

VM-Series

ExpressRoute

Job description

Yoh has an exciting, contract opportunity for a Staff Cloud Network Engineer to join our advanced technology client. This role is ideal for a senior‑level cloud networking professional who can provide hands‑on technical leadership across complex AWS, Azure, hybrid cloud, and enterprise network environments.

Candidates should be within a commutable distance of the greater San Diego or Los Angeles, CA area and comfortable with occasional travel as needed.

Title: Staff Cloud Network Engineer

Location: Greater San Diego or Los Angeles, CA area

Type: Contract

Compensation: $95.00–$130.00/hour, depending on experience level

Eligibility: Must be a U.S. Person as defined by ITAR due to access to export‑controlled technical data and/or technology

Responsibilities

• Lead the architecture, implementation, and ongoing improvement of highly available network environments spanning AWS, Azure, data centers, and enterprise locations.
• Design scalable cloud connectivity across multiple regions, accounts, and subscriptions using technologies such as AWS Transit Gateway, Cloud WAN, Direct Connect, Azure Virtual WAN, Virtual Hub, and ExpressRoute.
• Establish architecture standards for routing, segmentation, DNS, private connectivity, secure internet access, centralized inspection, and hybrid networking.
• Design and deploy Palo Alto Networks security solutions within public cloud environments, including Cloud NGFW and VM‑Series firewalls.
• Integrate cloud environments with corporate sites, data centers, and other infrastructure using resilient routing, VPN, and private connectivity solutions.
• Build and maintain reusable Terraform modules and infrastructure‑as‑code solutions for network deployment and configuration.
• Develop network automation using Python, Ansible, or similar technologies to reduce manual processes and improve operational consistency.
• Implement Git‑based development and CI/CD practices for validating, reviewing, testing, and deploying network changes.
• Partner with Cloud, Platform, Infrastructure, Security, and application engineering teams to develop standardized and reusable networking capabilities.
• Lead advanced troubleshooting of routing, firewall, DNS, connectivity, application access, and network performance issues.
• Develop monitoring and automated validation capabilities to proactively identify availability, capacity, configuration, performance, and security risks.
• Lead complex production network changes while adhering to established security and change‑management requirements.
• Maintain network architecture diagrams, engineering standards, runbooks, configuration documentation, and troubleshooting procedures.
• Provide technical mentorship and guidance to other engineers across cloud networking, automation, infrastructure as code, and troubleshooting.
• Support network technology lifecycle management, including upgrades, vulnerability remediation, licensing, configuration improvements, and technical debt reduction.
• Participate in scheduled maintenance, on‑call rotations, vendor escalations, and emergency response as required.

Qualifications

• 8+ years of experience designing and supporting complex enterprise or production networking environments, with significant experience in cloud networking.
• Advanced hands‑on networking experience across both AWS and Azure, with deep expertise in at least one platform.
• Experience architecting multi‑region, multi‑account, and/or multi‑subscription cloud networks.
• Strong hands‑on knowledge of technologies such as Direct Connect, ExpressRoute, Transit Gateway, Cloud WAN, Virtual WAN, and site‑to‑site VPNs.
• Experience deploying and managing Palo Alto Networks firewalls in AWS and Azure, including Cloud NGFW and/or VM‑Series and centralized management through Panorama.
• Expert‑level understanding of BGP, routing, segmentation, firewalls, VPNs, redundancy, and network failure scenarios.
• Strong background in enterprise routing, switching, network security, and hybrid cloud/data‑center connectivity.
• Significant hands‑on experience building production infrastructure using Terraform.
• Experience automating network operations with Python, Ansible, or comparable technologies.
• Experience with Git, peer‑review workflows, automated testing, and CI/CD.
• Demonstrated ability to lead complex networking initiatives from architecture and design through implementation and production support.
• Strong troubleshooting, documentation, communication, and technical leadership skills.
• Bachelor's degree in a relevant technical discipline or equivalent professional experience.
• Must qualify as a U.S. Person under applicable ITAR regulations due to the nature of the work and access to export‑controlled information.

Preferred Qualifications

• Experience with cloud‑native network security, private endpoints, centralized traffic inspection, DNS architecture, and secure egress patterns.
• Experience deploying Palo Alto Cloud NGFW or VM‑Series within AWS GovCloud and/or Azure Government environments.
• Experience designing high‑availability firewall architectures, centralized inspection, load‑balancer integrations, and symmetric traffic flows.
• Experience developing reusable Terraform modules or standardized networking services for consumption by other engineering teams.
• Familiarity with Juniper networking, enterprise wireless, Network Access Control, and Zero Trust Network Access technologies.
• Experience partnering closely with Cloud, Platform DevOps, Infrastructure, and Cybersecurity organizations.
• Relevant certifications such as AWS Certified Advanced Networking – Specialty, Azure Network Engineer Associate, CCNP, JNCIP, PCNSE, or equivalent.
• Previous experience supporting regulated, classified, aerospace, defense, or other mission‑critical technology environments.

Estimated Min Rate: $84.00

Estimated Max Rate: $120.00

What’s In It for You?

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh’s network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh’s extensive talent community that will provide you with access to Yoh’s vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh’s hiring clients’ preferences. To learn more about Yoh’s privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice.