Specialized Cloud Network Engineer Multi-Cloud

Specialized Cloud Network Engineer - Multi-Cloud
Contract Location: London/Belfast (Hybrid)
Contract Duration: 12 months initially (with potential extension)
Contract Start Date: Immediate
Contract Classification: Inside IR35

As a Cloud Network Engineer on the Public Cloud team you will be a critical enabler of Citis cloud transformation journey with a specialized focus on designing implementing and managing complex network architectures across our multi-cloud environment (AWS and Google Cloud) and integrating them seamlessly with our on-premise infrastructure. Our team is dedicated to evolving Citis application and data hosting environments into an integrated hybrid multi-cloud ecosystem. We focus on building automating and optimizing the foundational cloud network infrastructure and services that empower developers to innovate rapidly and this role you will design implement and maintain scalable resilient and secure cloud network platforms and solutions embodying a "you build it you run it" philosophy to ensure operational excellence.

Key Responsibilities

• Multi-Cloud Network Architecture & Engineering: Design implement and manage advanced network architectures across AWS and GCP including VPC/VNet design subnetting routing IP addressing schemes and network segmentation.
  
• Hybrid Cloud Connectivity: Establish and maintain robust high-performance and secure connectivity between on-premise data centers and public cloud environments using technologies such as AWS Direct Connect Google Cloud Interconnect VPNs and SD-WAN integration.
  
• Network as Code (NaC) & IaC: Develop maintain and optimize cloud network infrastructure using Infrastructure as Code (IaC) tools such as Terraform CloudFormation (AWS) and Deployment Manager (GCP). Create reusable modules and blueprints for standardized network deployments.
  
• Advanced Network Services: Configure and manage critical network services including DNS (Route 53 Cloud DNS) Load Balancing (ALB NLB Cloud Load Balancing) API Gateways and Content Delivery Networks (CDNs).
  
• Network Automation & Orchestration: Automate the provisioning configuration and management of cloud network resources and services. Develop scripts and tools (e.g. Python Go Bash) to streamline network operations ensure consistency and improve efficiency.
  
• Site Reliability Engineering (SRE) for Networks: Embrace a "you build it you run it" mindset for network services. Take ownership of the reliability performance and availability of the cloud network platforms. Implement robust network monitoring alerting and logging solutions and participate in on-call rotations to ensure rapid incident response and resolution for network-related issues.
  
• Network Security Implementation: Implement and enforce network security best practices including network access control lists (NACLs) security groups cloud firewalls (AWS WAF GCP Firewall Rules) and network intrusion detection/prevention systems. Ensure compliance with Citis policies industry standards and regulatory requirements.
  
• Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimization across hybrid and multi-cloud environments.
  
• Documentation & Knowledge Sharing: Create and maintain comprehensive documentation for cloud network architectures configurations and operational procedures. Mentor junior engineers and contribute to knowledge sharing within the team.
  

Required Qualifications & Skills

• Cloud Engineering Expertise: A deep understanding of public cloud services adoption at scale. Expert-level understanding of AWS/GCP across:
  
• Internet Application Hosting - Network Segmentation Security controls Network Firewall and Packet Mirroring & Inspection and Content Delivery Networks.
  
• B2B Connectivity - AWS & GCP Experience with Third party connectivity patterns Cloud B2B Architectures and familiarity with VPN AWS Privatelinks and Google Cloud Private Service Connect.
  
• Application Resiliency - DNS and DNS Routing AWS Route53 Load Balancers Google Cloud CloudDNS High availability & Resiliency and API platforms
  
• Hybrid cloud connectivity solutions (Direct Connect Cloud Interconnect VPNs SD-WAN).
  
• Networking concepts: TCP/IP routing protocols (BGP) network segmentation firewalls and network security principles.
  
• Network monitoring logging and alerting tools in a cloud context.
  
• Infrastructure as Code (IaC) Hands-on Expertise: Demonstrable experience with the following:
  
• Programming Languages: Python and Go.
  
• CI/CD: Terraform Harness Tekton Jenkins etc.
  
• Test Automation: Terratest Cucumber Pytest-BDD AWS Fault Injection Simulator (FIS) Chaos Mesh etc.
  
• Agile and DevOps Mindset: Familiarity with Agile Development DevOps and SRE practices.
  
• Adaptability: A demonstrated ability to quickly learn new technologies and adapt to changing project requirements.
  
• Strategic Thinking: Experience evaluating complex requirements and rationalizing them into a consistent service offering.
  
• Excellent Communication: The ability to effectively communicate technical concepts to both technical and non-technical audiences.
  
• Exceptional Teamwork and Collaboration: A proven ability to contribute effectively within a cross-functional team environment.
  

Preferred Qualifications & Skills

• Public cloud provider network-specific certifications (e.g. AWS Certified Advanced Networking - Specialty Google Cloud Professional Network Engineer).
  
• Experience with network security tools such as WAF DDoS protection and network intrusion detection/prevention systems.
  
• Familiarity with network virtualization and software-defined networking (SDN) concepts.
  
• Experience with container networking (e.g. Kubernetes CNI service mesh).
  
• Knowledge of compliance frameworks relevant to financial services (e.g. PCI DSS NIST ISO 27001).
  
• Experience with network performance testing and optimization tools.