BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio.
Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself.
The Role
The Cloud Network Engineer extends BeyondTrust's on-premises networking fundamentals into AWS cloud networking, with a primary focus on architecting and operating FedRAMP-aligned environments. The successful candidate demonstrates strong technical judgment, operational discipline, and the ability to apply practical solutions to complex hybrid network engineering challenges, while serving as the primary liaison between the Network and Cloud Ops teams.
What You’ll Do
- Operate and maintain BeyondTrust's on-premises and cloud network infrastructure, including routing/switching changes, datacenter resource changes, and routine firewall/security group changes end-to-end across on-prem and cloud environments; escalate complex or security-sensitive changes to the Sr. Engineer/SecOps.
- Design and implement AWS network architectures, including VPCs, Transit Gateway, VPN, Direct Connect, Route 53, and network security controls, aligned with FedRAMP, ISO 27001, and SOX requirements.
- Lead the CIDR range overlap remediation project by auditing existing on-prem and AWS CIDR allocations, designing a conflict-free addressing plan, and executing remediation/re-IP work with minimal disruption to production traffic.
- Serve as the primary day-to-day liaison between the Network team and Cloud Ops on network design, shared infrastructure changes, and incident coordination.
- Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices, extending networking expertise into AWS environments.
- Develop and maintain Infrastructure-as-Code and automation using Terraform, Ansible, Python, contributing reusable modules to the team's shared automation library.
- Participate in the shared 24x7 on-call rotation, independently resolving Tier-1 and Tier-2 escalations, including cloud connectivity issues.
- Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs, and provide regular progress updates.
- Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement and renewals.
- Work a hybrid or remote schedule depending on geographic proximity to a BeyondTrust office; travel to offices or datacenters as needed (5–10%).
