Cloud Network Engineer

What s Konfio?

A financial technology company dedicated to supporting the small and medium-sized companies in Mexico, developing and offering financial solutions to solve their main problems, and seeking to be the best ally of entrepreneurs with dreams and ambitions to create value, consolidate their well-being and contribute to the community.

Description

A Cloud Engineer is a key member of a Squad or team responsible for understanding the requirements of Software Engineers and collaborating with Cloud teams to create optimal experiences.

This role involves implementing solutions in line with platform and cloud engineering best practices to deliver infrastructure as code with a focus on quality, security, and performance.

The Cloud Engineer possesses a deep understanding of cloud-based systems and is proficient in delivering cloud services throughout their lifecycle.

One crucial aspect of this role is networking expertise. The Cloud Engineer is responsible for designing, implementing, and maintaining networking solutions within cloud environments.

This includes architecting Virtual Private Clouds (VPCs), configuring subnets, routing tables, internet gateways, and VPN connections to ensure secure and efficient communication between cloud resources.

Additionally, the Cloud Engineer collaborates with cross-functional teams to drive cloud change and release management processes.

They contribute to enhancing the overall maturity of cloud development and maintenance lifecycles by implementing best practices, automation, and monitoring tools to optimize network performance, security, and scalability.

Responsibilities

• Designing scalable, reliable, and secure network architectures on AWS. This includes designing Virtual Private Clouds (VPCs), subnets, route tables, internet gateways, NAT gateways, and VPN connections.
• Deploy and manage network appliances such as Fortinet FortiGate for advanced firewall capabilities, AWS Transit Gateway for connecting multiple VPCs and on-premises networks, and AWS Network Manager for centralized network management and monitoring in a Centralized and Multi Account Organization.
• Design Implement and manage IPv4 and IPv6 addressing schemes, subnets, and routing configurations on AWS networking infrastructure, ensuring compatibility, scalability, and optimal performance for both protocols.
• Utilize AWS networking services like AWS PrivateLink for secure communication between VPCs, AWS VPN for encrypted connections, and AWS CloudFront for content delivery network (CDN) services.
• Monitor network performance, availability, and reliability using AWS CloudWatch, AWS CloudTrail, Fortinet FortiGate logs, and third-party monitoring tools.

Optimize network resources for cost-efficiency and performance.

Troubleshoot network-related issues in AWS environments, including but not limited to VPC connectivity problems, subnet configurations, routing issues, DNS resolution, NAT gateway functionality, security group misconfigurations, and VPN connectivity challenges.

Utilize AWS CloudWatch metrics, VPC Flow Logs, and network monitoring tools to identify and resolve issues promptly, ensuring minimal impact on system availability and performance.

Collaborate with cross-functional teams to implement corrective actions, conduct root cause analysis, and document resolutions for knowledge sharing and continuous improvement.

• Automate network deployment and management processes using Terraform and GitOps practices, integrating with CI / CD tools like Jenkins, GitLab CI / CD, or GitHub Actions.
• Create reusable Terraform modules and templates for network deployments, ensuring consistency, scalability, and maintainability of infrastructure code.
• Provide general support for AWS services and infrastructure, including troubleshooting issues, responding to incidents, and assisting with system administration tasks such as user management, access controls, and permissions management.
• Provide support for infrastructure-related issues, troubleshoot Terraform configurations, and implement solutions to improve infrastructure reliability, security, and performance.
• Ensuring that the organization's cloud infrastructure is secure and compliant with relevant regulations and standards.

This can involve implementing security measures such as firewalls and encryption, and monitoring for potential security threats.

What are we looking for

• 4+ years of experience in a Cloud Network Engineer role or related position, with a strong background in Cloud Networking and infrastructure design.
• Strong understanding of Multi Account environments, including experience with centralized Transit Gateway, Network Manager, VPNs, and peering configurations.
• Deep knowledge of Network and Security Protocols such as BGP, DHCP, SSL, TLS, IPsec, TCP / IP, and VPN technologies, with hands-on experience in designing corporate B2E Client-to-Site VPNs and Site-to-Site VPNs solutions.
• 3+ years of experience developing multi-account solutions using Infrastructure as Code (IaC) tools like Terraform, ensuring scalability, security, and compliance across cloud environments.
• Proficient in AWS networking services such as Virtual Private Cloud (VPC), Elastic Load Balancing (ELB), Application Load Balancer (ALB), Network Load Balancer (NLB), Route 53, Direct Connect, Network Manager, and Transit Gateway.
• Familiarity with network monitoring tools such as New Relic, AWS CloudWatch, Grafana, and the ability to leverage these tools for performance optimization and troubleshooting.
• Strong scripting and automation skills using languages like Python, PowerShell, or Shell scripting to streamline network operations, automate deployments, and enhance infrastructure management efficiency.
• Excellent problem-solving skills, attention to detail, and the ability to work effectively in a collaborative team environment, contributing to the continuous improvement of Cloud Networking architectures and best practices.

Preferred

• Proficiency in English (written and spoken).
• AWS Certified Advanced Networking - Specialty
• Experience in Network Security, like : AWS Network Firewall.
• Experience designing and implementing Office Networking.
• Strong knowledge of Design Systems at Scale (load balancing, caching, sharding, autoscaling, etc).
• Experience in Observability tools, implementing logging, monitoring, and alerting.