Cloud Network Engineer

Job Title: Cloud Network Engineer

Location: Springfield, VA - Hybrid Remote

Eligibility: Candidate must possess an active Secret clearance

Job Description:

As the Cloud SME, you will serve as the Tier 3 technical expert for all
enterprise cloud-based services. You will be responsible for providing
high-level analysis, design, and strategic guidance for a complex,
multi-cloud environment. You will serve as the technical authority on
executive-level project teams, providing direction, interpretation, and
innovative solutions to exceptionally complex problems. The ideal
candidate thinks independently, demonstrates exceptional communication
skills, and applies extensive technical expertise to guide the
successful completion of major cloud migration and sustainment programs.

MEANINGFUL WORK AND PERSONAL IMPACT:

- Serve as the Tier 3 Subject Matter Expert (SME) for enterprise
cloud-based services, providing top-level support and
troubleshooting.

- Lead on-premises-to-cloud migration efforts, acting as the primary
technical liaison with Cloud Service Providers (CSPs) including
Microsoft Azure, AWS, Oracle Cloud (OCI), and Google Cloud.

- Engineer and support connectivity between the Secure Cloud Computing
Architecture (SCCA) and various CSPs.

- Establish, sustain, and provide Tier 3 support for enterprise F5
Application Delivery Controllers (ADCs), including the Local Traffic
Manager (LTM), Global Traffic Manager (GTM/DNS), and Access Policy
Manager (APM) modules.

- Develop and implement "break and inspect" solutions on F5 devices to
meet DISA cloud security requirements.

- Coordinate with CSPs and application developers to create advanced
Layer 7 health monitors for optimal application performance.

- Support the migration of on-premises applications and data to cloud
environments by evaluating migration plans and providing expert
guidance on fulfilling SCCA VDMS and VDSS requirements.

- Conduct analysis of network bandwidth and equipment utilization as
it relates to cloud initiatives and provide strategic
recommendations to stakeholders.

- Manage the entire circuit lifecycle, from submitting initial
procurement requests in DISA Storefront to configuring, installing,
and connecting new equipment and circuits for enterprise Cloud
Access Points (CAPs).

- Develop and maintain comprehensive documentation, including updated
design drawings, network maps, device configurations, and
maintenance procedures to reflect all changes to the cloud
environment.

- Participate in cloud migration planning sessions and Integrated
Product Reviews (IPRs), providing economy-of-scale recommendations
to shape an enterprise-level migration strategy.

- Manage cloud IP address space by submitting and tracking requests to
the DoD Network Information Center (NIC).

WHAT YOU’LL NEED TO SUCCEED - REQUIRED:

- CLEARANCE: Active Secret security clearance with a current SSBI or
the ability to obtain one.

- CERTIFICATIONS:

- DoD 8570 IAT Level III certification (e.g., CASP+ CE, CCNP
Security, CISA, CISSP, GCED, GCIH).

- Cisco Certified Network Professional Enterprise (CCNP-E)
certification.

- Check Point Certified Security Administrator (CCSA)
certification. Candidates who do not currently possess CCSA will
be required to obtain certification within 6 months of the hire
date.

- EDUCATION: Bachelor’s Degree in a relevant technical field.

- YEARS OF EXPERIENCE: 10 years of relevant experience. An additional
4 years of experience may be substituted in lieu of a degree.

- TECHNICAL SKILLS:

- Hands-on, expert-level experience with multiple CSPs, including
Azure, AWS, OCI, and Google Cloud.

- Deep technical expertise with F5 ADCs, specifically LTM, GTM,
and APM modules in a DoD environment.

- Strong background and practical experience with DoD cloud
frameworks, including SCCA, VDMS, and VDSS.

- Demonstrated experience with enterprise network design, routing,
switching, and data center technologies.

- Familiarity with the circuit provisioning process through DISA
Storefront.

- LOCATION: HYBRID - reporting onsite in Springfield, VA once or more
per week.

DESIRED QUALIFICATIONS:

- CERTIFICATIONS: Certifications applicable to this role include Azure
Fundamentals, AWS Cloud Practitioner, Comp TIA Cloud+, Check Point
Certified Security Expert (CCSE), Cisco Certified Internetworking
Expert -Enterprise Infrastructure (CCIE-EI), CheckPoint Certified
Security Administrator (CCSA).