Cloud Network Engineer

BeyondTrust is hiring a Cloud Network Engineer to extend its on-premises networking into AWS and architect and operate FedRAMP-aligned environments. The role maintains hybrid network infrastructure, leads AWS network design and CIDR remediation, and coordinates network work between the Network and Cloud Ops teams.

Responsibilities:

• Operate and maintain BeyondTrust's on-premises and cloud network infrastructure, including routing/switching changes, datacenter resource changes, and routine firewall/security group changes end-to-end across on-prem and cloud environments; escalate complex or security-sensitive changes to the Sr. Engineer/SecOps
• Design and implement AWS network architectures, including VPCs, Transit Gateway, VPN, Direct Connect, Route 53, and network security controls, aligned with FedRAMP, ISO 27001, and SOX requirements
• Lead the CIDR range overlap remediation project by auditing existing on-prem and AWS CIDR allocations, designing a conflict-free addressing plan, and executing remediation/re-IP work with minimal disruption to production traffic
• Serve as the primary day-to-day liaison between the Network team and Cloud Ops on network design, shared infrastructure changes, and incident coordination
• Mentor Network Administrators and Engineers on cloud networking fundamentals and hybrid connectivity best practices, extending networking expertise into AWS environments
• Develop and maintain Infrastructure-as-Code and automation using Terraform, Ansible, Python, contributing reusable modules to the team's shared automation library
• Participate in the shared 24x7 on-call rotation, independently resolving Tier-1 and Tier-2 escalations, including cloud connectivity issues
• Maintain network diagrams, CIDR/IPAM records, architecture documentation, and SOPs, and provide regular progress updates
• Manage vendor relationships for cloud connectivity services, circuit vendors, and network infrastructure procurement and renewals
• Work a hybrid or remote schedule depending on geographic proximity to a BeyondTrust office; travel to offices or datacenters as needed (5–10%)

Requirements:

• 3–5 years of total network administration/engineering experience, including 2+ years hands-on AWS cloud networking work with VPC design, Transit Gateway, VPN/Direct Connect, Route 53, network security controls across hybrid environments
• Demonstrated proficiency in Administrator/Engineer-level on-premises networking fundamentals
• 3-5 hands-on experience with Cisco NX-OS/IOS/IOS-XE, Dell, and Palo Alto equipment
• CCNA certification or equivalent hands-on experience
• Experience implementing and maintaining security controls aligned with industry frameworks such as ISO 27001, SOC2, and FedRAMP
• Strong documentation and organizational skills — demonstrated ability to produce clear network diagrams, IPAM records, and runbooks that hold up under audit
• Strong analytical and cross-team communication skills; comfortable operating as a liaison between technical teams with different priorities
• CCNP in progress, or equivalent Network Engineer-level experience
• Experience with IPAM tooling such asNetBox, phpIPAM, Infoblox, BlueCat
• Experience with Azure networking services and hybrid connectivity
• Direct experience supporting a FedRAMP ATO or continuous monitoring (ConMon) process
• Formal project management or technical project leadership experience
• Proficiency in dynamic routing protocols (EIGRP, BGP) and in identity and access management services including RADIUS, TACACS+, Duo, Okta, and Cisco ISE