Job Description:

• Responsible for the design, implementation, and operation of enterprise hybrid cloud network architecture, integrating public clouds (AWS, Alibaba Cloud, Huawei Cloud, Azure) with on-premise environments
• Lead the deployment, optimization, and maintenance of remote access and secure networking platforms, including VPN, SASE, and SD-WAN, ensuring secure and efficient connectivity for large-scale users worldwide
• Design and manage complex AWS networking environments — including VPC design, Transit Gateway, Direct Connect, Route 53, Security Groups, and inter-region connectivity — ensuring high availability, scalability, and compliance
• Manage and maintain enterprise firewalls, with extensive hands-on experience in Palo Alto and FortiGate for policy configuration, VPN management, and log analysis
• Plan, deploy, and troubleshoot hybrid and multi-cloud connectivity, covering routing, authentication, VPN, DNS, and traffic optimization
• Operate and optimize wireless networks, including enterprise Wi-Fi design, controller management, and performance troubleshooting
• Work with virtualization and infrastructure platforms, including VMware and cloud networking environments
• Implement automation and monitoring using Python and AI tools to enhance operational efficiency; apply Infrastructure as Code (Terraform) and NetDevOps practices to streamline configuration management
• Support PKI systems and certificate management to ensure secure authentication and encrypted connectivity
• Collaborate with global IT and Security teams to ensure network compliance, performance, and security across all environments
• Maintain accurate technical documentation, including AWS network architecture diagrams, firewall policies, automation scripts, and SOPs

Job Requirements:

• Bachelor’s degree or above in Computer Science, Network Engineering, or related field; 5+ years of relevant enterprise networking experience
• Expert-level knowledge of AWS networking, including VPC, Transit Gateway, Direct Connect, Route 53, Security Groups, and hybrid cloud interconnection
• Proven hands-on experience in VPN, SASE, and SD-WAN technologies, supporting large-scale remote or branch-office deployments
• Solid experience with public clouds (AWS, Alibaba Cloud, Huawei Cloud, Azure) and hybrid cloud architectures
• Strong operational knowledge of Palo Alto and FortiGate firewalls, including policy management, VPN setup, and troubleshooting
• Familiar with VMware virtualization and enterprise wireless network deployment and tuning
• Understanding of PKI, digital certificates, and enterprise authentication systems
• Proficient in core networking protocols (TCP/IP, DHCP, DNS, VLAN, routing, authentication), with strong troubleshooting and root cause analysis skills
• Experience with automation and AI-assisted network operations using Python
• Knowledge of Infrastructure as Code (IaC) and tools such as Terraform; familiar with NetDevOps principles, workflows, and toolchains
• Strong communication, ownership, and documentation skills; able to work independently in global teams
• Preferred certifications: AWS Advanced Networking Specialty, PCNSE, NSE7/NSE8, CCNP/CCIE, VMware VCP, Terraform Associate