Cloud Network Engineer

Job Description

Job Description

Position Description

ResolveSoft is seeking a Cloud Network Engineer to design, automate, and operate the multi-cloud networking layer connecting a federal agency's on-premise data centers to Oracle Cloud Infrastructure and Google Cloud Platform. The engineer builds and maintains dedicated hybrid connectivity, provisions every GCP network component through version-controlled Terraform, and extends the agency's IPv6 addressing plan into both cloud tenancies.

This role supports an active migration of on-premise databases to OCI and of workloads, data, and support systems to GCP, with the bulk of regional migrations targeted for completion by December 2026. Cloud connectivity is held to 99.95 percent availability and must meet TIC 3.0 inspection and logging requirements.

Responsibilities

Oracle Cloud Infrastructure

•      Manage the dual FastConnect virtual circuits terminating at the Ashburn data center, including BGP peering session configuration, maintenance, and bandwidth capacity planning.

•      Design and administer Virtual Cloud Networks, covering CIDR block allocation, subnets, route tables, Security Lists, and Network Security Groups.

•      Support the migration of on-premise Oracle databases and related resources into OCI, confirming network readiness ahead of each cutover.

•      Automate repeatable migration, validation, and documentation procedures so that network records stay accurate and auditable.

Google Cloud Platform and Infrastructure as Code

•      Manage Cloud Interconnect for high-throughput workloads and HA VPN for redundant backup paths.

•      Engineer Global VPCs, Shared VPC host and service project configurations, and VPC peering relationships.

•      Define, version control, and deploy every GCP network component through Terraform, including VPCs, firewall rules, Private Service Connect configurations, and load balancers.

•      Maintain the Terraform code base using the customer's native GCP tooling, including Google Cloud Secure Source Manager.

•      Provide hybrid connectivity support for workload, data, and support system migrations from on-premise infrastructure to GCP.

Multi-Cloud Routing, Security, and IPv6

•      Engineer secure inter-cloud connectivity where an application in one cloud depends on a data service in the other, applying BGP traffic engineering to prevent suboptimal paths.

•      Confirm that all cloud traffic is inspected and logged in line with TIC 3.0 reference architectures.

•      Convert OCI and GCP environments from IPv4-only to IPv6 dual-stack, and confirm that cloud resources and remote access gateways meet IPv6 requirements.

•      Report monthly on FastConnect bandwidth utilization, BGP peering status, Interconnect and HA VPN health, and Terraform-executed provisioning changes.

•      Prepare Methods of Procedure for cloud network changes and carry them through the Change Control Board.

•      Participate in the 24x7x365 on-call rotation, responding to Priority 1 incidents within 15 minutes.

Qualifications

Experience and Education

•      5 years of experience bridging traditional on-premises networking and cloud infrastructure.

•      Bachelor's degree in Information Technology, Computer Science, or a related field. An Associate's degree plus two additional years of experience may substitute for the Bachelor's degree.

•      Production experience with at least one of Oracle Cloud Infrastructure or Google Cloud Platform, and the ability to come up to speed quickly on the other.

•      Experience supporting a live data center to cloud migration, not only greenfield cloud build-out.

Technical Skills

•      OCI networking: FastConnect, VCN design, CIDR planning, route tables, Security Lists, and Network Security Groups.

•      GCP networking: Cloud Interconnect, HA VPN, Global VPC, Shared VPC, VPC peering, Private Service Connect, and cloud load balancing.

•      Terraform as the authoritative provisioning mechanism, including module design, state management, and version control workflow.

•      BGP design and traffic engineering across hybrid and inter-cloud paths.

•      Dual-stack IPv6 deployment in cloud environments, including addressing and routing.

•      On-premise routing and switching fundamentals sufficient to troubleshoot a hybrid path end to end.

•      Scripting for network automation, for example Python, and familiarity with automated documentation generation.

Certifications

No certification is mandatory under the PWS or the Task Order labor category. The following are the Task Order preferred certifications for this position:

•      GCP Professional Cloud Network Engineer.

•      OCI Specialist certifications relevant to cloud networking.

•      Valiant also values HashiCorp Certified: Terraform Associate and CCNP Enterprise for this role.

Communication and Stakeholder Engagement

•      Written and verbal communication skills sufficient to explain network and security concepts to both engineers and non-technical government stakeholders.

•      Ability to brief senior government leadership, including the Contracting Officer's Representative and Technical Lead, on incident root cause, risk, and remediation.

•      Clear technical writing for Methods of Procedure, topology diagrams, standard operating procedures, and monthly status report inputs.

•      Ability to work as a contractor employee in a non-personal services environment, identifying as contractor staff in all meetings, correspondence, and system records.

Federal Knowledge

•      Working knowledge of federal network security direction, including Zero Trust Architecture (NIST SP 800-207), Trusted Internet Connection (TIC) 3.0 reference architectures, and the IPv6 mandate under OMB M-21-07.

•      Familiarity with NIST SP 800-53 Rev. 5 security and privacy controls as they apply to network and boundary protection.

•      Understanding of HSPD-12 identity credentialing and its enforcement in network access decisions.

•      Awareness of Section 508 accessibility requirements (WCAG 2.0 AA) as they apply to contract deliverables.

•      Experience operating inside a federal change control process, with government-approved documentation and deliverable acceptance criteria.

•      Willingness to complete required customer training, including annual cybersecurity awareness, records management, privacy, safety, and harassment prevention training.

Must be able to obtain Public Trust clearance.

Our mission is to empower our clients to achieve sustainable success through efficient, cost-effective, and scalable solutions that drive significant performance improvements. We believe in delivering value-driven results and fostering a culture that attracts and retains top talent to provide scalable, adaptable services.

Company Description

Our mission is to empower our clients to achieve sustainable success through efficient, cost-effective, and scalable solutions that drive significant performance improvements. We believe in delivering value-driven results and fostering a culture that attracts and retains top talent to provide scalable, adaptable services.