Cloud Network Engineer

Job Description and Duties

The salary ranges listed in this Job Control may not reflect reductions in pay in accordance with the 2025 Personal Leave Program. Please follow the link for more information regarding the 2025 Personal Leave program. 

If you’re passionate about designing and supporting networks and want to make a meaningful impact, this is an opportunity to help shape the future of FTB’s infrastructure. You’ll tackle challenging engineering problems, work with leading-edge cloud technologies, and contribute to services that directly benefit millions of Californians. If you’re looking for a role where your expertise truly matters, we encourage you to apply.

As the Cloud Network Engineer, you will:

• Serve as a senior engineer responsible for designing, implementing, securing, and supporting FTB's cloud and hybrid enterprise network infrastructure
• Architect and maintain private, high-availability connectivity between on-premises and cloud environments using technologies such as AWS Direct Connect, Azure ExpressRoute, and dedicated point-to-point or Ethernet private line circuits
• Design and support cloud and on-premises firewall architectures, IDS/IPS solutions, and network security controls that ensure compliance, resiliency, and protection of mission-critical systems
• Implement and manage routing, switching, load balancing, and virtual network services across cloud and data center environments using protocols such as BGP, OSPF, EIGRP, TCP/IP, DNS, and
• Develop Infrastructure-as-Code artifacts using tools like Bicep, CloudFormation, or Terraform to standardize and automate network deployments
• Lead complex engineering initiatives, perform advanced troubleshooting and root cause analysis, and ensure operational stability for both cloud and traditional network services
• Collaborate with engineers, architects, security teams, project partners, and vendors to design modern, cost-optimized, and scalable cloud network solutions
• Contribute to governance, documentation, audits, risk assessments, modernization strategies, and continuous improvement efforts that support FTB's cloud and infrastructure transformation goals

To be successful in this opportunity, you should:

• Have strong, hands-on expertise in cloud, hybrid, and enterprise network engineering
• Excel at troubleshooting complex connectivity, routing, and security issues across cloud and on-premises environments
• Be skilled in designing secure, resilient, and scalable network architectures that support mission-critical services
• Be comfortable using Infrastructure-as-Code and automation to standardize and optimize network deployments
• Collaborate effectively with engineers, architects, security teams, vendors, and project partners
• Adapt quickly to evolving technologies and maintain a continuous learning mindset
• Demonstrate commitment to delivering reliable, secure, and cost-efficient services for the department and the public

Additional positions may become available (eRPA 2627-00018).

This is a re-advertisement. If you have previously applied to this JC, you do not need to reapply.

Please complete this optional survey letting us know how you heard about this position by 

You will find additional information about the job in the .

Working Conditions

• Interviews will be conducted in person.
  
• This position is not eligible for visa sponsorship. Applicants must be authorized to work in the US without the need for a visa sponsorship, now or in the future.
  
• This position requires 4 or more days in the office per week. It is designated office-centered and may be eligible for some remote work based on departmental guidelines and operational need.

About the Technology Services Division (TSD) The mission of TSD is to securely deliver and support information technology solutions and services essential to the success of the FTB’s mission. By acting on our TSD mission, we will realize our vision of a collaborative and diverse team of IT experts who further innovation and empower our business partners to accomplish their goals. Read more about FTB . 

Learn more about other FTB technical roles at this FTB microsite .

Need help understanding the hiring process or have questions about FTB? We'd love to talk to you! Before applying, read through these step by step instructions to apply, or contact us at View email address on us.fitly.work . Please include the job control (JC) number and the position title in the subject line.

Special Requirements

• The position(s) require(s) a Background Investigation be cleared prior to being hired.

This business uses E-Verify in its hiring practices to achieve a lawful workforce. E-Verify is a web-based system that allows enrolled employers to confirm the eligibility of their employees to work in the United States. For more information about E-Verify, please go to .

CALIFORNIA CODE OF REGULATIONS, TITLE 2, SECTION 172 : All candidates for, appointees to, and employees in the state civil service shall possess the general qualifications of integrity, honesty, sobriety, dependability, industry, thoroughness, accuracy, good judgment, initiative, resourcefulness, courtesy, ability to work cooperatively with others, willingness and ability to assume the responsibilities and to conform to the conditions of work characteristic of the employment, and a state of health, consistent with the ability to perform the assigned duties of the class. Where the position requires the driving of an automobile, the employee must have a valid state driver's license, a good driving record and is expected to drive the car safely. The foregoing general qualifications shall be deemed to be a part of the personal characteristics of the minimum qualifications of each class specification and need not be specifically set forth therein.

**IMPORTANT NOTICE** As required by the department's rules of conduct, all employees of the Franchise Tax Board (FTB) must be in compliance with the California Revenue and Taxation Code. During the background investigation portion of the hiring process, FTB will review return information to verify California state income tax compliance. Any failure to comply with the California Revenue and Taxation Code may prevent you from being hired at FTB. You must verify your filing status by calling View phone number on us.fitly.work to resolve any potential tax compliance issues, prior to submitting your application and seeking employment with FTB. All applicants not currently employed with the Franchise Tax Board will be subject to a pre-employment background investigation. The investigation will consist of completion of a pre-employment questionnaire, fingerprinting, and an inquiry to the Department of Justice to disclose criminal records. We comply with the Americans with Disabilities Act. Persons with hearing or speech impairments, call TTY/TDD View phone number on us.fitly.work.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to clearly demonstrate how you meet the Minimum Qualifications and Alternate Range Placement for the position on your State Application (STD Form 678). The application should also clearly demonstrate the candidate’s ability to meet the Desirable Qualifications identified in this job advertisement. The Classification Specification is located on this Job Announcement Posting under "Minimum Requirements”.

We encourage applications regardless of whether you think you meet 100% of these skills below. Please highlight your knowledge, skills, and experience related to the below desirable qualifications in your application package.

• Extensive experience designing, implementing, and supporting cloud and hybrid network architectures across AWS, Azure, or similar platforms
• Hands on expertise with private cloud connectivity solutions such as Direct Connect, ExpressRoute, or dedicated data circuits
• Understanding of enterprise routing, switching, VLAN design, and protocols such as BGP, OSPF, and EIGRP
• Experience designing and supporting firewall architectures, IDS/IPS solutions, and network security controls
• Proficiency with Infrastructure-as-Code tools such as Bicep, CloudFormation, or Terraform for network automation and standardization
• Demonstrated ability to troubleshoot complex, multi layer connectivity issues spanning cloud and on premises environments
• Experience contributing to or leading network modernization initiatives, cloud migrations, or infrastructure transformation projects
• Familiarity with cost optimization practices for cloud networking and hybrid connectivity.
• Documentation skills and experience supporting governance, compliance, risk assessments, and change management processes
• Ability to collaborate effectively with engineers, architects, security teams, vendors, and project stakeholders
• Commitment to continuous learning and staying current with emerging cloud, network, and security technologies
• Demonstrated communication, analytical, and problem solving skills

Benefits

Benefit information can be found on the website and the website.

In addition, Franchise Tax Board offers the following:

• Convenient transportation and commuting options include : Light Rail stop, bicycle lockers, free parking, and carpool/vanpool opportunities

Additional Application Instructions

A complete application package must be received in the Classification & Hiring Unit or postmarked by the final filing date and must include:

• Completed employment information on the STD. 678, including the “From” and “To” dates, “Hours Per Week,” and “Duties Performed" fields for all jobs listed in the “Employment History” fields (resumes do not take the place of these fields on the STD. 678)
• All of the required documents listed in the “Required Application Package Documents” section
• The position number and job control number in the job title line of the STD. 678, if submitting a paper application package (these numbers will auto-populate in the job title line of the STD. 678 if submitting an electronic application through your CalCareer Account )
• A signature, if submitting a paper application package

Candidates who do not follow all of the listed application instructions may be eliminated from the selection process. All submitted information will be screened and the most qualified candidates will be invited to an interview.

Electronic applications submitted through your CalCareer Account are highly recommended. If you are unable to apply electronically through your CalCareer account, please mail a completed and signed STD. 678 and application package to the mailing address provided above in the “Application Instructions” section.

Do not include full Social Security Number, method of eligibility, and LEAP information in your application package.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Other - A cover letter is required and must be included.
• Other - Required : If you are basing your eligibility on educational requirements, you MUST provide a legible copy of your transcripts as proof of meeting the education requirement as listed in the Classification Specification (please see the Class Specification located under “Minimum Requirements” on the left-hand side of this job posting). Applicants with foreign transcripts must provide a foreign transcript evaluation that indicates the number of units to which the foreign course work is equivalent. Transcripts may be official or unofficial; please redact birthdates and social security numbers. If you are not basing your eligibility on an educational requirement, you may instead use the bypass option (when applying, select Choose/Upload for the required document and then select Bypass File).
• Supplemental Application - In order to be considered for this position, interested candidates must submit a supplemental application. Your response must be no more than two type-written pages in length, using 12-point font, 1-inch standard margins and include your first and last name in the upper right-hand corner of the page. Respond to the following supplemental statement(s):
  Describe a complex cloud network solution you personally designed and implemented, including the problem you were solving, the cloud networking architecture you deployed (such as hub and spoke), the cloud networking and private interconnect technologies used, your routing and security architecture decisions, how you ensured high availability across both cloud and on premises environments, and the final outcome along with what you would improve if repeating the project.