Note: The job is a remote job and is open to candidates in USA. Catapult Solutions Group is seeking a Cloud Network Engineer to support the US Department of the Treasury's T-Cloud program. The role involves managing the configuration, installation, and ongoing support of network infrastructure in a multi-cloud environment, ensuring security and reliability of the network systems.
Responsibilities
- In-Depth knowledge and hands-on experience with major cloud platforms, such as Azure, OCI and GCP
- Comprehensive knowledge of cloud security best practices and ability to implement security measures within cloud networks
- Strong understanding of networking protocols and technologies, including TCP/IP, DNS, DHCP, VPN, BGP and OSPF
- Strong understanding of Virtual Private Clouds (VPCs) and subnets to meet the organization’s performance and security requirements
- Experience with software-defined networking (SDN) and virtual networking concepts
- Experience with identity and access management (IAM) in cloud environments
- Experience with installation of various network devices and services (e.g., routers, firewalls, load balancers, VPN, QoS)
- Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations for any third-party network devices in cloud platforms
- Work with the existing network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control in cloud platforms
- Monitor performance and ensure system availability and reliability
- Monitor system resource utilization, trending, and capacity planning
- Provide Level-2/3 support and troubleshooting to resolve issues
Skills
- Must be a US Citizen with the ability to obtain a Public Trust clearance
- Bachelors degree and seven 7 years or more of related experience or Masters and four (4) or more years of related experience
- Strong experience working with Terraform
- Need to have experience with AWS Security group deployment using Terraform
- Experience with cloud or on-prem devices such as Cisco and Palo Alto firewalls
- Working technical knowledge of TCP/IP networks and standards (IEEE 802.1)
- Must have experience with EKS Cluster
- Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM)
- Experience with Palo Alto firewalls
- Experience configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs
- Strong knowledge and understanding of TCP/IP network technologies; DNS, DHCP, TFTP, NAT, and SSL
- Participation in 24/7 on-call rotation is required for this role
- Azure Fundamentals, GCP or Oracle Cloud Certifications
- CCNP or Higher (CCIE and/or CISSP highly valued)
- PaloAlto Networks Certifies Network Security Engineer (PCNSE)
Company Overview