Cloud Network Engineer

Who are we? A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway’s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character. We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world? Learn more about our unique culture and history. Job Opportunity Berkshire Hathaway Specialty Insurance (BHSI) is seeking a skilled and forward-thinking Cloud Network Engineer to join our Global Digital Services team based out of our Stevens Point, WI or Boston, MA office locations. This newly created role is critical in shaping the future of our cloud infrastructure, ensuring it is secure, scalable, resilient, and aligned with industry best practices. As part of a high-performing team, you will be responsible for architecting and maintaining complex cloud network environments that support mission‑critical financial applications and services across multiple regions. The ideal candidate will have technical expertise in Microsoft Azure networking, covering areas such as virtual networks, firewalls, routing, and hybrid connectivity. The role also involves using Cloudflare’s services to support performance, security, and Zero Trust access control on a global scale. Knowledge of Zero Trust architecture is required, including experience with identity‑aware access, micro‑segmentation, and continuous verification throughout all network layers. This position requires a security‑first mindset, with the ability to design and implement solutions that meet stringent regulatory requirements. You will work closely with cross‑functional teams—including cybersecurity, DevOps, and enterprise architecture—to ensure seamless integration of cloud networking components into broader IT strategies. Supporting a global organization, this position may involve occasional night and weekend work. Ideal candidates will have experience in regulated industries, a passion for automation and infrastructure‑as‑code, and a proactive approach to problem‑solving in dynamic, large‑scale environments. Duties & Responsibilities Design and implement secure, scalable network solutions in Microsoft Azure. Integrate Cloudflare services for DNS, CDN, DDoS protection, and Zero Trust access. Design and enforce Zero Trust network segmentation and identity‑aware access controls. Manage Azure networking components: VNets, NSGs, Azure Firewall, ExpressRoute, and VPN Gateways. Monitor and troubleshoot network performance, latency, and connectivity issues. Maintain infrastructure‑as‑code templates using Terraform, Bicep, or ARM. Implement secure connectivity between cloud and on‑prem environments. Ensure compliance with PCI‑DSS, SOX, GDPR, and internal security policies. Conduct regular audits and vulnerability assessments of cloud network configurations. Partner with DevOps, Security, and Application teams to support hybrid and cloud‑native workloads. Provide mentorship and technical guidance to junior engineers. Participate in incident response and post‑mortem analysis for network‑related events. Qualifications, Skills And Experience Cloud Platforms: Deep expertise in Microsoft Azure, including networking, security, and monitoring. Security & Access: Experience with Zero Trust frameworks, Cloudflare Zero Trust, and Azure AD Conditional Access. Networking: Strong understanding of TCP/IP, DNS, BGP, IPSec, SD‑WAN, and SASE. Automation & IaC: Proficiency in Terraform, PowerShell, Python, and CI/CD pipelines. Monitoring & Logging: Familiarity with Azure Monitor, Log Analytics, Cloudflare Analytics, and SIEM tools. Protocols & Tools: Experience with REST APIs, SSL/TLS, Load Balancers, and Reverse Proxies. BHSI Offers A competitive package and exciting growth opportunities for career‑oriented teammates. A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates, and our other stakeholders. A purposely non‑bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework. Benefits that support your life and well‑being, which include: Comprehensive Health, Dental and Vision benefits Disability Insurance (both short‑term and long‑term) Life Insurance (for you and your family) Accidental Death & Dismemberment Insurance (for you and your family) Flexible Spending Accounts Health Reimbursement Account Employee Assistance Program Retirement Savings 401(k) Plan with Company Match Generous holiday and Paid Time Off Tuition Reimbursement Paid Parental Leave The base salary range for this position in Stevens Point, WI is $75,000 to $110,000, along with annual bonus eligibility. For the position based in Boston, MA, the base salary range is $80,000 to $115,000 along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates – both their capabilities and character – as demonstrated by our amazing culture. NOTE: Compensation will be commensurate with experience. This job description is not intended to be all‑inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization. #J-18808-Ljbffr