Network Engineer for Cloud Network Optimization & Security

Project Overview:

We are seeking an expert-level network engineer to perform a critical audit and overhaul of our existing cloud network infrastructure (VPC). Our goal is to enhance security, optimize performance, and create a scalable and well-documented network topology that can support future growth with confidence.

The Business Challenge:

Our current VPC configuration lacks a defined structure and segmentation strategy. This has resulted in potential security vulnerabilities and makes it difficult to manage traffic flow, secure sensitive data, and diagnose performance issues. A well-designed network is a foundational element of our infrastructure, and the current setup presents a significant business risk.

Your Key Responsibilities:

As our Senior Network Engineer, you will be responsible for transforming our cloud network from its current state into a secure and highly-performant environment. Your responsibilities will include:

• Audit & Review: Conducting a thorough audit of our current VPC, routing tables, and security groups to identify existing vulnerabilities and performance bottlenecks.
• Design & Implementation: Designing and implementing a new, well-segmented network topology with private and public subnets to ensure proper isolation of resources.
• Security Configuration: Implementing robust network access control lists (NACLs) and defining granular Security Group rules to enforce the principle of least privilege.
• Infrastructure as Code (IaC): Using an IaC tool (e.g., Terraform) to manage all network configurations, ensuring the environment is reproducible and version-controlled.
• Documentation: Providing a comprehensive final network diagram and detailed documentation of all configurations and changes.

Required Expertise & Skills:

We are looking for a professional with a proven track record of designing and securing cloud networks. You must have:

• Deep Cloud Networking Expertise: Extensive hands-on experience with a major cloud provider's networking services (AWS VPC, Azure VNet, or GCP VPC).
• Strong Networking Fundamentals: A solid understanding of networking concepts, including subnets, routing, IP addressing, and firewalls.
• Network Security Best Practices: Proven experience in implementing security best practices for cloud environments.
• Infrastructure as Code: Proficiency with Terraform or a similar IaC tool for managing network resources.

Employer Expectations:

• Clear and proactive communication throughout the project.
• A final, production-ready network configuration that is secure and optimized.
• A professional, well-documented network diagram and a report on all implemented changes.

Expected Deliverables:

• A secure and optimized VPC configuration.
• A detailed, professional network diagram.
• Comprehensive documentation of the new network topology and security rules.