Enter a job title or keyword

Senior Cloud Network Engineer (Azure, AWS, OCI , BGP, Fortinet)


Job Location:

Toronto - Canada

Monthly Salary: K 10 - 10
Experience Required: 5years
Posted: 29 July 2026 (30+ days ago)
Application Deadline: 26 October 2026
Vacancies: 1 Vacancy

Job Summary

Job Title: Senior Cloud Network Engineer (Azure AWS OCI BGP Fortinet)

Key Responsibilities

Design and implement cloud network architectures across Azure (VNet ExpressRoute VPN Gateway) AWS (VPC TGW Direct Connect) and OCI (VCN DRG FastConnect)
Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering
Troubleshoot network connectivity issues across hybrid and multi-cloud environments including asymmetric routing firewall drops and DNS resolution failures
Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection
Configure NSGs UDRs Security Lists NACLs and route propagation across cloud platforms
Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes
Manage DNS architecture including Azure Private DNS Zones Route 53 Private Hosted Zones OCI DNS and custom resolvers
Collaborate with CGI and third-party network providers on change management and incident resolution
Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics
Produce and maintain network architecture diagrams runbooks and change documentation

Required Qualifications

6 years of networking experience with 4 years in cloud network engineering
Deep expertise in Azure Networking: VNet ExpressRoute VPN Gateway Azure Firewall and Azure DNS
Strong knowledge of AWS Networking: VPC TGW Direct Connect Route 53 ALB/NLB and PrivateLink
Hands-on experience with OCI Networking: VCN DRG FastConnect and Security Lists
Experience with BGP routing route summarization and AS-PATH manipulation
Proficiency with Fortinet FortiGate NVA configuration (policies routing HA failover)
Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones)
Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
AWS Advanced Networking Specialty

Nice to Have

Experience working alongside MSP/carrier-managed ExpressRoute environments
Knowledge of SASE SD-WAN or Zscaler Private Access (ZPA) architectures


Required Skills:

Sailpoint