Technology - Infrastructure Engineer IV

Cloud Network Engineer

Job Location: Pittsburgh, PA 15258 or Lake Mary, FL 32746, New York, NY (Hybrid - 4 days onsite) Duration: 12 months+ (Possible Extension) Pay Range: $90 - $100/hr W2 (without medical benefits and no PTOs & no federal/national holidays)

Role Summary: The Cloud Network Engineer will design, implement, and maintain secure, resilient network capabilities in public cloud environments (e.g., Client Azure). The role emphasizes configuration management, asset/data inventories, third-party service oversight, secure communications, privacy considerations for systems processing personal data, and continuous monitoring of control effectiveness. The engineer will collaborate across technology, risk, and compliance teams to ensure that standards are implemented consistently and that audit-ready evidence is available.

Core Responsibilities:

• Implement and maintain asset and data inventories across in-scope cloud subscriptions and resources.
• Develop and uphold configuration management practices, including baseline configurations and protection of configuration documentation; review and update baselines on defined intervals.
• Oversee external service providers and third-party integrations to ensure adherence to BNY security, risk, and performance expectations; define oversight roles/responsibilities and support independent reviews where applicable.
• Establish and enforce network communications policies (including wireless usage restrictions within defined authorization boundaries), and ensure monitoring is in place at system boundaries in accordance with enterprise standards.
• Define acceptable use policies for mobile code and VoIP technologies; authorize, monitor, and control usage in line with enterprise security standards.
• Coordinate shared evidence for physical and environmental controls with cloud providers and aggregate provider documentation as needed for audits.
• Conduct privacy impact assessments, where required, prior to deploying systems that process personal data; ensure logging and monitoring align to applicable enterprise requirements.
• Enable continuous monitoring: implement dashboards, metrics, and reporting; track remediation of findings; produce periodic compliance reports and audit artifacts; support authorization and operational readiness reviews as needed.
• Create and maintain clear technical documentation, including control implementation narratives, procedures, and evidence packages; partner with risk, audit, and compliance stakeholders to meet review expectations.
• Collaborate with cross-functional teams (cloud engineering, security, architecture, operations) to prioritize remediation, improve control coverage, and drive operational resilience.

Must Haves:

• Hands-on experience with network engineering in public cloud environments (preferably Azure), including virtual networks, routing, segmentation, security groups/firewalls, and boundary protections.
• Proficiency with cloud governance and policy tooling to assess and enforce configuration and compliance across customer-managed resources.
• Firewalls & security groups (NSGs), load balancing, VPN, ExpressRoute
• Hands-on configuration experience
• Terraform (automation/deployment) experience
• 7–10+ years experience preferred, but strong fundamentals + quick learner acceptable
• Strong background in configuration management, including defining baselines, protecting configuration documentation, and maintaining inventories.
• Practical knowledge of secure identity and access practices (e.g., multi-factor authentication, least privilege, just-in-time access) and how customer responsibilities align with provider-implemented controls.
• Experience producing audit-ready documentation: implementation narratives, procedures, evidence, and periodic compliance reports; ability to communicate effectively with technical and non-technical stakeholders.
• Scripting or automation experience (e.g., PowerShell, Python, Terraform) for policy enforcement, configuration, monitoring, and evidence collection.
• Strong analytical, problem-solving, and collaboration skills; ability to work in a fast-paced environment and drive outcomes across multiple teams.

Nice to Have:

• Experience with Azure networking services (VNets, NSGs, firewalls, Private Link, route tables) and policy-as-code approaches for governance in large environments.
• Familiarity with enterprise security and risk management practices and working with internal/external audit stakeholders.
• Background supporting regulated workloads or customers, with a focus on operational rigor, documentation quality and continuous monitoring.