{bc}
workday

Cloud Network Engineer

Booz Allen Hamilton
San Antonio, USA
Full-time
Senior · 8+ years experience
Onsite
Discovered 2 weeks ago

Full Job Posting

What You'll Do

  • Architect, deploy, and manage cloud network infrastructures across AWS, Azure, and other government cloud environments, including IL4–IL6 high-side enclaves.
  • Design and manage Layer 3 routing constructs, including VPC routing, transit gateways, peering, private endpoints, route optimization, and service mesh ingress and egress.
  • Engineer and maintain Layer 7 firewalling, including WAF, NGFW, application gateways, reverse proxies, and BCAP boundary controls.
  • Implement and enforce Zero Trust and BCAP-aligned boundary protection, including identity-aware segmentation, least-privilege access, and application-layer enforcement.
  • Build and manage hybrid connectivity solutions including Direct Connect, ExpressRoute, VPNs, inter‐cloud routing, and cross‐domain guard integrations.
  • Develop and maintain Infrastructure‐as‐Code (IaC) for networking, including Terraform, CloudFormation, ARM/Bicep, and Ansible.
  • Conduct packet analysis, network forensics, and performance diagnostics using tools such as tcpdump, Wireshark, and cloud-native monitors.
  • Collaborate with cybersecurity teams to operationalize STIGs, RMF controls, ATO/cATO requirements, cloud policy enforcement, and logging/telemetry pipelines.
  • Provide expertise during incident response, boundary security events, and connectivity disruptions.
  • Create and maintain network diagrams, CMDB entries, enclave documentation, and cross‐domain connectivity models.
  • Join us. The world can't wait.
  • You Have:
  • 5+ years of experience with cloud network engineering in enterprise or government environments
  • Expertise in AWS or Azure cloud networking constructs, including VPC, TGW, VNet, vWAN, routing tables, endpoints, security groups, or NACLs
  • Experience with Layer 3 technologies, including BGP, OSPF, static routing, or network segmentation
  • Experience with Layer 7 firewalls, WAF, or NGFW platforms, including Palo Alto, Fortinet, AWS WAF, or Azure Firewall
  • Ability to obtain a Secret clearance
  • Bachelor’s degree in an IT or Engineering field or 8+ years of experience with network engineering or firewall administration in lieu of a degree
  • DoW 8140/Defense Cyber Workforce Framework (DCWF) compliant certification
  • Nice If You Have:
  • Experience with network security tools such as Palo Alto or Fortinet firewalls
  • Experience with scripting or automation skills with tools such as Python or Ansible
  • Knowledge of cloud networking technologies, including AWS, Azure, or GCP
  • Clearance:
  • Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Qualifications

  • Experience with Layer 3 technologies, including BGP, OSPF, static routing, or network segmentation
  • Experience with Layer 7 firewalls, WAF, or NGFW platforms, including Palo Alto, Fortinet, AWS WAF, or Azure Firewall
  • Bachelor’s degree in an IT or Engineering field or 8+ years of experience with network engineering or firewall administration in lieu of a degree
  • Experience with network security tools such as Palo Alto or Fortinet firewalls
  • Experience with scripting or automation skills with tools such as Python or Ansible

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Booz Allen Hamilton