Sr. Cloud Network Engineer

JLL empowers you to shape a brighter way.

Our people at JLL are shaping the future of real estate for a better world by combining world class services advisory and technology for our clients. We are committed to hiring the best most talented peopleand empowering them to thrive grow meaningful careers and to find a place where they belong. Whether youve got deep experience in commercial real estate skilled trades or technology or youre looking to apply your relevant experience to a new industry join our team as we help shape a brighter way forward.

JLL is seeking an experienced Senior Cloud Network Engineer to design build secure and operate enterprise network services across Microsoft Azure Amazon Web Services and Google Cloud Platform. Azure is the primary focus of this role with responsibility for supporting standardized connectivity and network architecture across JLLs broader multi-cloud environment.

The ideal candidate brings deep Azure networking expertise together with strong hands-on AWS and GCP skills enterprise networking fundamentals infrastructure automation experience and a security-first mindset. This individual will collaborate with cloud platform cybersecurity architecture application and operations teams to deliver scalable resilient and consistent multi-cloud network solutions.

Design and implement scalable Azure network architectures using Virtual Networks subnets route tables Network Security Groups Azure Virtual WAN Virtual Network Manager NAT Gateway Private Link and Azure DNS.

Design and operate AWS network architectures using VPCs subnets route tables Transit Gateway Cloud WAN Direct Connect Site-to-Site VPN PrivateLink Route 53 and Network Firewall.

Design and support GCP network services using Shared VPC Network Connectivity Center Cloud Router Cloud Interconnect HA VPN Private Service Connect Cloud NAT Cloud DNS and hierarchical firewall policies.

Build regional and multi-region architectures that meet availability performance security and disaster-recovery requirements.

Engineer connectivity among Azure AWS GCP enterprise data centers branch locations and strategic technology partners using ExpressRoute Direct Connect Cloud Interconnect VPN and software-defined networking services.

Support Azure AWS and GCP landing zones and establish standardized network patterns for new subscriptions accounts projects applications and business units.

Review application onboarding requirements and recommend appropriate connectivity segmentation DNS load-balancing and security designs.

Design and maintain Azure Firewall policies AWS Network Firewall policies GCP hierarchical firewall policies security groups network ACLs microsegmentation controls ingress and egress policies and secure routing standards.

Integrate cloud-native networking with enterprise security platforms including Palo Alto Networks Cloud NGFW and VM-Series secure web gateways and zero-trust services.

Support internal and external load-balancing solutions including integration with web application firewalls and application-delivery services.

Partner with cybersecurity teams to implement network security controls aligned with zero-trust principles and JLL security standards.

Assist with vulnerability remediation audit requests compliance assessments and implementation of required security controls.

Develop and maintain reusable Terraform modules for Azure AWS and GCP network services and connectivity patterns.

Automate network provisioning configuration validation compliance checks and operational workflows.

Integrate infrastructure code with Git-based version control and CI/CD pipelines.

Implement policy-as-code and configuration standards to reduce manual changes and prevent network drift.

Produce clear technical documentation network diagrams configuration standards and operational runbooks.

Monitor the health performance utilization and availability of Azure AWS and GCP network services.

Troubleshoot complex routing BGP DNS firewall latency packet-loss and application-connectivity issues.

Use Azure Network Watcher and Connection Monitor AWS Reachability Analyzer and VPC Flow Logs GCP Network Intelligence Center and Connectivity Tests packet captures and related observability tools.

Lead root-cause analysis for major incidents and develop corrective and preventive actions.

Participate in change management capacity planning lifecycle management and disaster-recovery testing.

Provide technical leadership during high-severity incidents and participate in an on-call rotation when required.

Identify opportunities to improve network resilience operational efficiency security and cost optimization.

Serve as the subject-matter expert for Azure networking while providing senior-level engineering support for AWS GCP multi-cloud architecture and hybrid-cloud connectivity.

Collaborate with global network engineering cloud platform cybersecurity enterprise architecture application and service-management teams.

Provide design reviews technical guidance and mentoring to engineers and operational support teams.

Work with Microsoft AWS Google Cloud telecommunications carriers managed-service providers and technology vendors to resolve technical issues and deliver new capabilities.

Help establish engineering standards reference architectures governance controls and cloud network operating procedures.

Support knowledge transfer and the transition of repeatable operational activities to managed-service and support teams.

Bachelors degree in computer science information technology engineering or a related discipline or equivalent professional experience.

Seven or more years of enterprise network engineering experience including at least three years of hands-on Azure networking experience and demonstrated AWS and GCP networking experience.

Advanced Azure networking knowledge including Virtual WAN Virtual Network Manager ExpressRoute VPN Gateway Azure Route Server Private Link Load Balancer Application Gateway Azure Firewall Network Watcher and Azure DNS.

Advanced AWS networking knowledge including VPC Transit Gateway Cloud WAN Direct Connect Site-to-Site VPN PrivateLink Elastic Load Balancing Route 53 Network Firewall Reachability Analyzer and VPC Flow Logs.

Strong GCP networking knowledge including Shared VPC Network Connectivity Center Cloud Router Cloud Interconnect HA VPN Private Service Connect Cloud NAT Cloud Load Balancing Cloud DNS and VPC Flow Logs.

Strong understanding of TCP/IP IPv4 and IPv6 BGP DNS NAT VPNs routing segmentation high availability and network security.

Experience designing connectivity between public cloud platforms and enterprise data centers.

Hands-on experience with Terraform and Git-based infrastructure-development practices.

Experience troubleshooting complex network and application-connectivity issues in large enterprise environments.

Strong documentation communication problem-solving and stakeholder-management skills.

Ability to work effectively across globally distributed teams and manage multiple priorities.

Microsoft Certified: Azure Network Engineer Associate or Azure Solutions Architect Expert; AWS Certified Advanced Networking Specialty and Google Cloud Professional Cloud Network Engineer are also valued.

Cisco CCNP Palo Alto Networks PCNSE HashiCorp Terraform Associate or comparable industry certification.

Experience with Palo Alto Networks cloud security solutions Cloud NGFW or VM-Series firewalls.

Experience with Azure Virtual WAN AWS Transit Gateway or Cloud WAN GCP Network Connectivity Center ExpressRoute Direct Connect Cloud Interconnect and multi-cloud routing architectures.

Experience with software-defined WAN secure access service edge zero-trust networking and cloud-based security services.

Familiarity with Python Go PowerShell or another automation language.

Experience with GitHub Actions GitLab CI Azure DevOps Jenkins or similar CI/CD platforms.

Knowledge of ServiceNow ITIL processes Agile delivery practices and enterprise change management.

Experience supporting a large globally distributed organization with complex regulatory security and availability requirements.

Establish secure scalable and repeatable Azure-led network architecture patterns across Azure AWS and GCP.

Improve the resilience and operational visibility of Azure AWS GCP and hybrid-cloud connectivity.

Increase infrastructure-as-code adoption and reduce manual network configuration.

Strengthen routing segmentation firewall and governance standards.

Reduce recurring network incidents through automation monitoring and root-cause remediation.

Improve technical documentation and knowledge transfer across engineering and support teams.

Deliver assigned cloud-network initiatives within agreed scope schedule security and availability requirements.

Location:

If this job description resonates with you we encourage you to apply even if you dont meet all of the requirements. Were interested in getting to know you and what you bring to the table!

At JLL we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities we analyze your application for relevant skills experiences and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role yourepursuing.

JLL Privacy Notice

Jones Lang LaSalle (JLL) together with its subsidiaries and affiliates is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLLs recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely.

For more information about how JLL processes your personal data please view our Candidate Privacy Statement.

For additional details please see our career site pages for each country.

Jones Lang LaSalle (JLL) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process including the online application and/or overall selection process you may email us at . This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL.

Jones Lang LaSalle (JLL) está comprometida a trabajar con personas con discapacidades y proporcionarles accesibilidad. Si necesita un ajuste razonable para cualquier parte del proceso de empleo incluyendo la candidatura en línea y/o el proceso general de selección puede enviarnos un correo electrónico a. Este correo electrónico es solo para solicitar un ajuste razonable. Por favor dirija cualquier otra consulta general de reclutamiento a nuestra página Contáctanos > Quiero trabajar para JLL.