Job Description
MTSI is seeking a full-time Cloud Network Engineer located at Wright-Patterson AFB, Ohio. The Cloud Network Engineer will design, implement, and support cloud-based network infrastructure for a pilot enclave and future expanded cloud presence. This role will focus on hybrid connectivity, cloud network segmentation, routing, firewalling, load balancing, secure access, DNS integration, network security controls, and cloud architecture alignment.
The candidate should have hands-on experience deploying and supporting cloud networking in AWS, Azure, Google Cloud, or similar environments, with a strong understanding of enterprise networking and hybrid integration.
Responsibilities:
Your essential job functions will include but may not be limited to:
· Design and implement cloud network architecture for pilot and production environments.
· Support hybrid connectivity between on-premise infrastructure and cloud environments.
· Develop cloud VPC/VNet designs, subnets, route tables, security groups, network ACLs, firewalls, gateways, and transit architectures.
· Implement segmentation strategies for multi-tenant systems, management networks, shared services, frontend access, backend storage, and application environments.
· Support cloud VPNs, private circuits, transit gateways, virtual WANs, cloud routers, and direct connectivity.
· Integrate cloud DNS, identity-aware access, certificate services, logging, and monitoring.
· Support cloud firewall policies, network inspection, egress control, ingress control, and zero-trust network principles.
· Work with DevOps engineers to codify cloud networking using Terraform, Ansible, or equivalent automation tools.
· Develop cloud network diagrams, traffic flow diagrams, routing plans, and firewall rule matrices.
· Support test planning, validation, failover testing, and production readiness assessments.
· Provide recommendations for scalability, resilience, performance, security, and cost optimization.
· Participate in cloud architecture reviews and migration planning.
· Explain cloud network design decisions to architecture boards and leadership.
· Work collaboratively with network, security, DevOps, and system teams.
· Identify risks before implementation.
· Participate in migration planning, cutover events, test events, and rollback planning.
· Coordinate with cybersecurity teams to ensure network controls align with organizational security requirements.
· Mentor junior staff and participate in architecture reviews.
· Create and deliver system status updates to customers and stakeholders
Qualifications Required:
· Applicants must have experience with:
o Enterprise networking fundamentals including routing, switching, DNS, VPN, NAT, subnetting, segmentation, and firewalling.
o Cloud networking constructs such as VPCs, VNets, subnets, route tables, gateways, peering, private endpoints, security groups, and cloud firewalls.
o Hybrid connectivity patterns between on-premise networks and cloud environments.
o Network security architecture including segmentation, inspection, access control, and least privilege.
o Load balancing, reverse proxies, TLS termination, and application delivery concepts.
o Cloud logging and network telemetry.
o High availability and disaster recovery concepts for cloud networks.
o Cloud-native and third-party network security appliances.
o Infrastructure as Code for cloud network deployment.
· Experience with one or more major cloud providers. Multi-cloud experience is preferred.
o AWS
§ VPC, Subnets, Route Tables
§ Security Groups, NACLs
§ Transit Gateway
§ Site-to-Site VPN
§ Direct Connect
§ Route 53
§ Elastic Load Balancing
§ AWS Network Firewall
§ PrivateLink
§ CloudWatch, VPC Flow Logs
§ IAM and KMS basics
o Microsoft Azure
§ VNets, Subnets, NSGs
§ Azure Firewall
§ Virtual WAN
§ VPN Gateway
§ ExpressRoute
§ Azure Load Balancer, Application Gateway
§ Private Link, Private Endpoints
§ Azure DNS
§ Network Watcher
§ Entra ID integration awareness
o Google Cloud
§ VPC Networks
§ Cloud Router
§ Cloud VPN
§ Cloud Interconnect
§ Firewall Rules
§ Cloud Load Balancing
§ Private Service Connect
§ Cloud DNS
§ VPC Flow Logs
· Candidates should have working knowledge of:
o Terraform/HCL
o Python
o Bash or PowerShell
o YAML and JSON
o Cloud CLI tools such as AWS CLI, Azure CLI, or gcloud
· Strong documentation and diagramming discipline.
· Attention to detail in routing, firewall rules, and security group configuration.
· Strong troubleshooting across on-premise and cloud boundaries.
- Ability to communicate clearly with technical and non-technical stakeholders.
· Self-starter with a strong sense of personal responsibility.
· 10 years of network engineering, cloud engineering, or infrastructure engineering experience.
· At least 3–5 years of hands-on cloud networking experience preferred.
Education:
· Bachelor's degree in preferred in Computer Science, Information Systems, Engineering, Cybersecurity, or related technical field.
Preferred certifications include:
· AWS Advanced Networking Specialty
· AWS Solutions Architect
· Azure Network Engineer Associate
· Azure Solutions Architect Expert
· Google Professional Cloud Network Engineer
· Cisco CCNP Enterprise or CCNP Security
· CompTIA Security+
· CCSP
Even better if you have these desired skills:
· Terraform, OpenTofu
· Ansible
· CloudFormation, AWS CDK, ARM, Bicep
· GitLab, GitHub Enterprise, Azure DevOps
· Palo Alto VM-Series, Fortinet FortiGate-VM, Cisco cloud security appliances
· Aviatrix, Alkira, Prosimo, or other cloud networking platforms
· Wireshark, tcpdump, cloud packet capture tools
· Elastic, Splunk, Grafana, Prometheus
· .
Clearance Requirements
· Must possess a Top Secret (TS) security clearance (with SCI and SAP eligibility).
#LI-MM1
#ONSITE
