Cloud Network Engineer at TEKsystems Newport Beach, CA

Responsibilities Multi-Cloud Network Design: Design and architect network solutions in AWS and Azure, including Virtual Private Clouds (VPCs), Azure Virtual Networks (VNet), subnets, routing tables, and peering configurations. Ensure cloud network architectures are scalable, highly available, and meet business requirements for low latency and throughput. Hybrid Connectivity: Implement and manage hybrid connectivity between on-premises data centers and the cloud (AWS Direct Connect, Azure ExpressRoute, and site-to-site VPNs). Ensure secure and reliable communication channels that connect corporate offices, data centers, and cloud resources. Data Center Networking (Cisco ACI): Oversee on-premises data center network infrastructure using Cisco Application Centric Infrastructure (ACI). This includes configuring and managing the ACI fabric, defining application network profiles/policies, and integrating the on-prem network with cloud environments for a seamless hybrid cloud network strategy. Software-Defined WAN (Cisco Viptela SD-WAN): Administer and optimize the Cisco SD-WAN (Viptela) solution to connect branch offices and remote sites to data centers and cloud services. Monitor SD-WAN performance, manage edge routers and controllers, and adjust policies to ensure reliable WAN connectivity and bandwidth efficiency across the organization. Network Security and Access (Cisco ISE): Implement and enforce network access controls using Cisco Identity Services Engine (ISE). Manage 802.1X authentication, device profiling, network segmentation (TrustSec), and user/device access policies to protect network resources and comply with security standards. Work closely with cybersecurity teams to align network security measures with corporate policies and regulatory requirements. Routing and Switching: Utilize expert-level knowledge of traditional networking to configure and manage Cisco routers and switches (Catalyst/Nexus series). Handle advanced routing protocols (BGP, OSPF, EIGRP) and switching technologies (VLANs, STP, EtherChannel) to maintain a robust internal network that interacts smoothly with cloud networks. Ensure network redundancy, failover, and high availability across all infrastructure. Performance Monitoring & Troubleshooting: Continuously monitor network performance (cloud and on-prem) and troubleshoot complex connectivity issues. Use network monitoring tools and cloud services (CloudWatch, Azure Monitor, etc.) to identify bottlenecks or anomalies, and conduct root-cause analysis for latency, packet loss, or security events. Lead incident response for network-related issues and implement preventative measures to avoid recurrence. Network Optimization: Tune network configurations and optimize traffic flow for both on-prem and cloud environments. This includes implementing traffic engineering techniques, quality of service (QoS) policies for critical applications, and ensuring efficient utilization of cloud network services (such as AWS Transit Gateway, Azure Virtual WAN) to improve performance and reduce costs. Documentation and Compliance: Create and maintain detailed network documentation, including architecture diagrams, network device configurations, cloud network setups, and failover procedures. Ensure that network designs and operations adhere to industry best practices and compliance requirements relevant to financial services (e.g. network security standards, audit requirements). Provide documentation and reports for audits, risk assessments, and regulatory compliance as needed. Cross-Team Collaboration: Collaborate with cloud architects, security engineers, systems engineers, and application teams to plan and deploy network solutions that support new initiatives and applications. Provide technical guidance on network implications for architecture decisions and ensure network considerations are integrated into cloud and infrastructure projects. Continuous Improvement: Stay up-to-date with emerging networking technologies, cloud advancements, and security threats. Evaluate new tools or services (e.g., network automation platforms, SASE solutions, advanced cloud networking features) that could enhance network reliability or security. Lead or participate in projects to pilot and implement innovative networking solutions in the organization. Qualifications and Experience 8+ years of experience in network engineering, including significant experience designing and supporting enterprise networks and cloud networking solutions. Cloud Networking Expertise: Proven hands‑on experience with AWS and Azure networking services. Ability to design and manage AWS VPCs (with components like subnets, route tables, security groups, NAT Gateway, Transit Gateway) and Azure VNets (with components like subnets, user‑defined routes, network security groups, Azure Firewall/UDR, VPN Gateway). Strong understanding of cloud network architectures, connectivity options, and security best practices in both AWS and Azure. Cisco Routing & Switching: Extensive experience with Cisco networking hardware and software. Deep knowledge of routing protocols (BGP, OSPF, etc.), switching technologies, and network infrastructure in a large‑scale environment. Demonstrated ability to configure, optimize, and troubleshoot Cisco routers, switches, and related network hardware in a complex, multi‑site network. Software‑Defined Networking Technologies: Proficiency with advanced Cisco network solutions, including Cisco ACI for data center SDN, Cisco SD‑WAN (Viptela) for wide‑area networking, and Cisco ISE for network access control. Hands‑on experience deploying and managing these technologies in production, with a focus on policy‑driven network segmentation and secure connectivity. Network Security: Strong knowledge of network security principles and tools. Experience implementing network segmentation, ACLs, VPN encryption, and working with firewalls or security appliances in conjunction with network engineering tasks. Ability to design networks that meet strict security and compliance requirements (preferred experience in a regulated industry such as financial services). Certifications: Cisco CCIE (Cisco Certified Internetwork Expert) certification required (active status). At least one cloud networking certification is required, such as AWS Certified Advanced Network. Pay The pay range for this position is $90.00 - $110.00/hr. Benefits Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan – Pre‑tax and Roth post‑tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long‑term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Workplace: Hybrid – Newport Beach, CA The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. #J-18808-Ljbffr Itlearn360