Cloud Network Engineer

MTSI is seeking a full-time Cloud Network Engineer located at Wright-Patterson AFB, Ohio. The Cloud Network Engineer will design, implement, and support cloud-based network infrastructure for a pilot enclave and future expanded cloud presence. This role will focus on hybrid connectivity, cloud network segmentation, routing, firewalling, load balancing, secure access, DNS integration, network security controls, and cloud architecture alignment. The candidate should have hands-on experience deploying and supporting cloud networking in AWS, Azure, Google Cloud, or similar environments, with a strong understanding of enterprise networking and hybrid integration. Responsibilities: Your essential job functions will include but may not be limited to: *Design and implement cloud network architecture for pilot and production environments. *Support hybrid connectivity between on-premise infrastructure and cloud environments. *Develop cloud VPC/VNet designs, subnets, route tables, security groups, network ACLs, firewalls, gateways, and transit architectures. *Implement segmentation strategies for multi-tenant systems, management networks, shared services, frontend access, backend storage, and application environments. *Support cloud VPNs, private circuits, transit gateways, virtual WANs, cloud routers, and direct connectivity. *Integrate cloud DNS, identity-aware access, certificate services, logging, and monitoring. *Support cloud firewall policies, network inspection, egress control, ingress control, and zero-trust network principles. *Work with DevOps engineers to codify cloud networking using Terraform, Ansible, or equivalent automation tools. *Develop cloud network diagrams, traffic flow diagrams, routing plans, and firewall rule matrices. *Support test planning, validation, failover testing, and production readiness assessments. *Provide recommendations for scalability, resilience, performance, security, and cost optimization. *Participate in cloud architecture reviews and migration planning. *Explain cloud network design decisions to architecture boards and leadership. *Work collaboratively with network, security, DevOps, and system teams. *Identify risks before implementation. *Participate in migration planning, cutover events, test events, and rollback planning. *Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements. *Mentor junior staff and participate in architecture reviews. *Create and deliver system status updates to customers and stakeholders Qualifications Required: *Applicants must have experience with: oEnterprise networking fundamentals including routing, switching, DNS, VPN, NAT, subnetting, segmentation, and firewalling. oCloud networking constructs such as VPCs, VNets, subnets, route tables, gateways, peering, private endpoints, security groups, and cloud firewalls. oHybrid connectivity patterns between on-premise networks and cloud environments. oNetwork security architecture including segmentation, inspection, access control, and least privilege. oLoad balancing, reverse proxies, TLS termination, and application delivery concepts. oCloud logging and network telemetry. oHigh availability and disaster recovery concepts for cloud networks. oCloud-native and third-party network security appliances. oInfrastructure as Code for cloud network deployment. *Experience with one or more major cloud providers. Multi-cloud experience is preferred. oAWS *VPC, Subnets, Route Tables *Security Groups, NACLs *Transit Gateway *Site-to-Site VPN *Direct Connect *Route 53 *Elastic Load Balancing *AWS Network Firewall *PrivateLink *CloudWatch, VPC Flow Logs *IAM and KMS basics oMicrosoft Azure *VNets, Subnets, NSGs *Azure Firewall *Virtual WAN *VPN Gateway *ExpressRoute *Azure Load Balancer, Application Gateway *Private Link, Private Endpoints *Azure DNS *Network Watcher *Entra ID integration awareness oGoogle Cloud *VPC Networks *Cloud Router *Cloud VPN *Cloud Interconnect *Firewall Rules *Cloud Load Balancing *Private Service Connect *Cloud DNS *VPC Flow Logs *Candidates should have working knowledge of: oTerraform/HCL oPython oBash or PowerShell oYAML and JSON oCloud CLI tools such as AWS CLI, Azure CLI, or gcloud *Strong documentation and diagramming discipline. *Attention to detail in routing, firewall rules, and security group configuration. *Strong troubleshooting across on-premise and cloud boundaries.

• Ability to communicate clearly with technical and non-technical stakeholders.

*Self-starter with a strong sense of personal responsibility. *10 years of network engineering, cloud engineering, or infrastructure engineering experience. *At least 3-5 years of hands-on cloud networking experience preferred. Education: *Bachelor's degree in preferred in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field. Preferred certifications include: *AWS Advanced Networking Specialty *AWS Solutions Architect *Azure Network Engineer Associate *Azure Solutions Architect Expert *Google Professional Cloud Network Engineer *Cisco CCNP Enterprise or CCNP Security *CompTIA Security+ *CCSP Even better if you have these desired skills: *Terraform, OpenTofu *Ansible *CloudFormation, AWS CDK, ARM, Bicep *GitLab, GitHub Enterprise, Azure DevOps *Palo Alto VM-Series, Fortinet FortiGate-VM, Cisco cloud security appliances *Aviatrix, Alkira, Prosimo, or other cloud networking platforms *Wireshark, tcpdump, cloud packet capture tools *Elastic, Splunk, Grafana, Prometheus *. Clearance Requirements : *Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).
#LI-MM1 #ONSITE

• 
  
  
  Interesting Work:
  
  
  
  Our co-workers support some of the most important and critical programs to our national defense and security.
  
  
  
  
• 
  
  
  Values:
  
  
  
  Our first core value is that employees come first. We challenge our co-workers to provide the highest level of support and service, and reward them with some of the best benefits in the industry.
  
  
  
  
• 
  
  
  100% Employee Owned:
  
  
  
  We have a stake in each other's success, and the success of our customers. It's also nice to know what's going on across the company; we have company wide town-hall meetings three times a year.
  
  
  
  
• 
  
  
  Great Benefits - Most Full-Time Staff Are Eligible for:
  
  
  
  
  



• Starting PTO accrual of 20 days PTO/year + 10 holidays/year
  
  
• Flexible schedules
  
  
• 6% 401k match with immediate vesting up to $9k annually
  
  
• Semi-annual bonus eligibility (July and December)
  
  
• Company funded Employee Stock Ownership Plan (ESOP) - a separate qualified retirement account
  
  
• Up to $10,000 in annual educational reimbursement
  
  
• Other company funded benefits, like life and disability insurance
  
  
• Optional zero deductible Blue Cross/Blue Shield health insurance plan
  
  





• 
  
  
  Track Record of Success:
  
  
  
  We have grown every year since our founding in 1993.
  
  
  
  

Modern Technology Solutions, Inc. (MTSI) is a 100% employee-owned engineering services and solutions company that provides high-demand technical expertise in Digital Transformation, Modeling and Simulation, Rapid Capability Development, Test and Evaluation, Artificial Intelligence, Autonomy, Cybersecurity and Mission Assurance

MTSI delivers capabilities to solve problems of global importance. Founded in 1993, MTSI today has employees at over 20 offices and field sites worldwide.

For more information about MTSI, please visit

MTSI embraces nine core values including our first core value of Employees come first. Consistent with our Core Values, we are committed to Equal Opportunity, making decisions without regard to race, color, religion, sex, national origin, age, military/veteran status, disability, or any other characteristics protected by applicable law. MTSI is committed to Equal Employment Opportunity and providing reasonable accommodations to applicants and employees with physical and/or mental disabilities.