Specialized Cloud Network Engineer -
Multi-Cloud
Contract Location: London/Belfast (Hybrid)
Contract Duration: 12 months initially (with potential extension)
Contract Start Date: Immediate
Contract Classification: Inside IR35
Job Summary
As a Cloud Network Engineer on the Public
Cloud team, you will be a critical enabler of the banks cloud transformation
journey, with a specialized focus on designing, implementing, and managing
complex network architectures across our multi-cloud environment (AWS and
Google Cloud) and integrating them seamlessly with our on-premise
infrastructure. Our team is dedicated to evolving the banks application and data
hosting environments into an integrated, hybrid multi-cloud ecosystem. We focus
on building, automating, and optimizing the foundational cloud network
infrastructure and services that empower developers to innovate rapidly and
securely. In this role, you will design, implement, and maintain scalable,
resilient, and secure cloud network platforms and solutions, embodying a
"you build it, you run it" philosophy to ensure operational
excellence.
Key Responsibilities
- Multi-Cloud Network Architecture & Engineering: Design, implement, and manage advanced network architectures
across AWS and GCP, including VPC/VNet design, subnetting, routing, IP
addressing schemes, and network segmentation.
- Hybrid Cloud Connectivity: Establish and maintain robust, high-performance, and secure connectivity
between on-premise data centers and public cloud environments using
technologies such as AWS Direct Connect, Google Cloud Interconnect, VPNs,
and SD-WAN integration.
- Network as Code (NaC) & IaC: Develop, maintain, and optimize cloud network infrastructure using
Infrastructure as Code (IaC) tools such as Terraform, CloudFormation
(AWS), and Deployment Manager (GCP). Create reusable modules and
blueprints for standardized network deployments.
- Advanced Network Services: Configure and manage critical network services including DNS (Route 53,
Cloud DNS), Load Balancing (ALB, NLB, Cloud Load Balancing), API Gateways,
and Content Delivery Networks (CDNs).
- Network Automation & Orchestration: Automate the provisioning, configuration, and management of
cloud network resources and services. Develop scripts and tools (e.g.,
Python, Go, Bash) to streamline network operations, ensure consistency,
and improve efficiency.
- Site Reliability Engineering (SRE) for Networks: Embrace a "you build it, you run it" mindset for
network services. Take ownership of the reliability, performance, and
availability of the cloud network platforms. Implement robust network
monitoring, alerting, and logging solutions, and participate in on-call
rotations to ensure rapid incident response and resolution for
network-related issues.
- Network Security Implementation: Implement and enforce network security best practices, including network
access control lists (NACLs), security groups, cloud firewalls (AWS WAF,
GCP Firewall Rules), and network intrusion detection/prevention systems.
Ensure compliance with the banks policies, industry standards, and regulatory
requirements.
- Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimization
across hybrid and multi-cloud environments.
- Documentation & Knowledge Sharing: Create and maintain comprehensive documentation for cloud
network architectures, configurations, and operational procedures. Mentor
junior engineers and contribute to knowledge sharing within the team.
Required Qualifications & Skills
- Cloud Engineering Expertise: A
deep understanding of public cloud services adoption at scale.
Expert-level understanding of AWS/GCP across:
- Internet Application Hosting - Network Segmentation, Security
controls, Network Firewall and Packet Mirroring & Inspection and
Content Delivery Networks.
- B2B Connectivity - AWS & GCP Experience with Third party
connectivity patterns, Cloud B2B Architectures and familiarity with VPN,
AWS Privatelinks and Google Cloud Private Service Connect.
- Application Resiliency - DNS and DNS Routing, AWS Route53,
Load Balancers, Google Cloud CloudDNS, High availability & Resiliency
and API platforms
- Hybrid cloud connectivity solutions (Direct Connect, Cloud Interconnect, VPNs, SD-WAN).
- Networking concepts: TCP/IP, routing protocols (BGP), network
segmentation, firewalls, and network security principles.
- Network monitoring, logging, and alerting tools in a cloud
context.
- Infrastructure as Code (IaC) Hands-on Expertise: Demonstrable experience with the following:
- Programming Languages: Python and Go.
- CI/CD: Terraform, Harness, Tekton, Jenkins, etc.
- Test Automation: Terratest, Cucumber, Pytest-BDD, AWS Fault
Injection Simulator (FIS), Chaos Mesh, etc.
- Agile and DevOps Mindset: Familiarity
with Agile Development, DevOps, and SRE practices.
- Adaptability: A demonstrated
ability to quickly learn new technologies and adapt to changing project
requirements.
- Strategic Thinking: Experience
evaluating complex requirements and rationalizing them into a consistent
service offering.
- Excellent Communication: The
ability to effectively communicate technical concepts to both technical
and non-technical audiences.
- Exceptional Teamwork and Collaboration: A proven ability to contribute effectively within a
cross-functional team environment.
Preferred Qualifications & Skills
- Public cloud provider network-specific certifications (e.g.,
AWS Certified Advanced Networking - Specialty, Google Cloud Professional
Network Engineer).
- Experience with network security tools such as WAF, DDoS
protection, and network intrusion detection/prevention systems.
- Familiarity with network virtualization and software-defined
networking (SDN) concepts.
- Experience with container networking (e.g., Kubernetes CNI,
service mesh).
- Knowledge of compliance frameworks relevant to financial
services (e.g., PCI DSS, NIST, ISO 27001).
- Experience with network performance testing and optimization
tools.