Note: The job is a remote job and is open to candidates in USA. Catapult Solutions Group is seeking a Cloud Network Engineer to support the US Department of the Treasury's T-Cloud program. The role involves managing the configuration, installation, and ongoing support of network infrastructure in a multi-cloud environment, ensuring security and reliability of the network systems.

Responsibilities

• In-Depth knowledge and hands-on experience with major cloud platforms, such as Azure, OCI and GCP
• Comprehensive knowledge of cloud security best practices and ability to implement security measures within cloud networks
• Strong understanding of networking protocols and technologies, including TCP/IP, DNS, DHCP, VPN, BGP and OSPF
• Strong understanding of Virtual Private Clouds (VPCs) and subnets to meet the organization’s performance and security requirements
• Experience with software-defined networking (SDN) and virtual networking concepts
• Experience with identity and access management (IAM) in cloud environments
• Experience with installation of various network devices and services (e.g., routers, firewalls, load balancers, VPN, QoS)
• Perform network maintenance and system upgrades including service packs, patches, hot fixes, and security configurations for any third-party network devices in cloud platforms
• Work with the existing network administrators and engineers to manage, deploy, and troubleshoot firewalls, routers, VPN concentrators, and Network Access Control in cloud platforms
• Monitor performance and ensure system availability and reliability
• Monitor system resource utilization, trending, and capacity planning
• Provide Level-2/3 support and troubleshooting to resolve issues

Skills

• Must be a US Citizen with the ability to obtain a Public Trust clearance
• Bachelors degree and seven 7 years or more of related experience or Masters and four (4) or more years of related experience
• Strong experience working with Terraform
• Need to have experience with AWS Security group deployment using Terraform
• Experience with cloud or on-prem devices such as Cisco and Palo Alto firewalls
• Working technical knowledge of TCP/IP networks and standards (IEEE 802.1)
• Must have experience with EKS Cluster
• Working knowledge of DoD STIGs, and IA Vulnerability Management (IAVM)
• Experience with Palo Alto firewalls
• Experience configuring and troubleshooting Cisco IPsec (AES 256), Firewall, IPS, route-maps, and NACLs
• Strong knowledge and understanding of TCP/IP network technologies; DNS, DHCP, TFTP, NAT, and SSL
• Participation in 24/7 on-call rotation is required for this role
• Azure Fundamentals, GCP or Oracle Cloud Certifications
• CCNP or Higher (CCIE and/or CISSP highly valued)
• PaloAlto Networks Certifies Network Security Engineer (PCNSE)

Company Overview