Job Title: Senior Cloud Network Engineer (Azure, AWS, OCI, BGP, Fortinet)
Key Responsibilities
• Design and implement cloud network architectures across Azure (VNet, ExpressRoute, VPN Gateway), AWS (VPC, TGW, Direct Connect), and OCI (VCN, DRG, FastConnect)
• Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering
• Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including asymmetric routing, firewall drops, and DNS resolution failures
• Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection
• Configure NSGs, UDRs, Security Lists, NACLs, and route propagation across cloud platforms
• Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes
• Manage DNS architecture, including Azure Private DNS Zones, Route 53 Private Hosted Zones, OCI DNS, and custom resolvers
• Collaborate with CGI and third-party network providers on change management and incident resolution
• Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics
• Produce and maintain network architecture diagrams, runbooks, and change documentation
Required Qualifications
• 6+ years of networking experience with 4+ years in cloud network engineering
• Deep expertise in Azure Networking: VNet, ExpressRoute, VPN Gateway, Azure Firewall, and Azure DNS
• Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, and PrivateLink
• Hands-on experience with OCI Networking: VCN, DRG, FastConnect, and Security Lists
• Experience with BGP routing, route summarization, and AS-PATH manipulation
• Proficiency with Fortinet FortiGate NVA configuration (policies, routing, HA failover)
• Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones)
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
• AWS Advanced Networking Specialty
Nice to Have
• Experience working alongside MSP/carrier-managed ExpressRoute environments
• Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures