Senior Cloud Network Engineer

Senior Cloud Network Engineer

Job Overview

• Role Type: Full-Time, Onsite
• Location: Golden, CO
• Salary Range: $160,000 – $180,000 / year (DOE) + 10% bonus potential
• Benefits: Comprehensive medical/dental/vision/life coverage, flexible PTO, 11 holidays, parental leave, immediately vested 401(k) with company match, and professional development support.

Role Summary

We are seeking a Senior Cloud Network Engineer to design, secure, and operate network architectures primarily across AWS (with secondary Azure environments). This role is responsible for driving strict network segmentation, client VPN integrations, compliance evidence collection (SOC 2 Type II, PCI DSS), and managing all network infrastructure purely as code via peer-reviewed Terraform/OpenTofu pipelines.

Key Responsibilities

• Cloud Architecture & Routing: Architect and manage VPCs, VNets, and Transit Gateways across AWS and Azure; enforce strict deny-by-default separation between production and non-production environments.
• Client VPN & Secure Connectivity: Own end-to-end onboarding and maintenance of IPsec (IKEv2) and SSL/TLS tunnels with enterprise clients; lead technical troubleshooting calls and write Root Cause Analyses (RCAs).
• Infrastructure as Code (IaC): Deliver 100% of network changes via code—authoring reusable OpenTofu/Terraform modules through peer-reviewed pull requests (no console changes in production).
• Security & Compliance: Implement and audit network controls for SOC 2 Type II and PCI DSS; conduct recurring firewall/NACL reviews and collaborate on threat modeling and incident response.
• Operations & Reliability: Maintain network observability, build health alerts and runbooks, and participate in an on-call rotation for network incidents.

Qualifications

Required

• Education & Experience: Bachelor’s degree in Computer Science (or equivalent practical experience) with 5+ years of hands-on network engineering in cloud-native or hybrid environments.
• Cloud Networking: Deep hands-on expertise in AWS networking (VPC, Transit Gateway, Route 53, Security Groups, NACLs, Network Firewall, IAM, SSM). Working knowledge of Azure networking (or strong AWS with readiness to expand into Azure).
• Protocols & Connectivity: Proven experience designing and supporting enterprise IPsec/SSL VPN tunnels, BGP, OSPF, and routing policy.
• Infrastructure as Code: Proven experience authoring reusable Terraform or OpenTofu modules.
• Compliance: Hands-on experience implementing network controls and collecting audit evidence for SOC 2 and/or PCI DSS.
• Troubleshooting & Scripting: Strong packet-level analysis skills (Wireshark, tcpdump, mtr, iperf) and scripting fluency in Python, Bash/PowerShell, and AWS/Azure CLIs.

Preferred

• Relevant certifications: AWS Advanced Networking Specialty, Azure Network Engineer Associate, CCNP, or equivalent.
• Background in financial services or regulated environments.
• Experience with network observability (VPC Flow Logs, Datadog, Grafana) and CI/CD pipelines (Harness, GitHub Actions).
• Exposure to Kubernetes networking (CNI, ingress, service mesh), ZTNA, or WAF/DDoS protection (AWS Shield/WAF).
• Experience using modern AI coding assistants (GitHub Copilot, Cursor, Claude) to accelerate module authoring and documentation.