Network Engineer Mid - AF One

GES was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract and currently an opening for a multi-cloud Network Engineer supporting AWS, Azure, GCP, and OCI. This is an exciting opportunity to use your experience to modernize a leading, global-scale multi-cloud environment in support of a critical mission, supporting USAF system resiliency, security, and cost effectiveness.

Location:

These positions will be hybrid remote. Candidates may be required to work onsite as needed. Preferred candidates will be located near Hanscom AFB (Boston, MA) or work in Huntsville, AL.

Primary Responsibilities Include:

As a Network Engineer, you will have deep experience in designing and securing cloud-based networks, including deploying Infrastructure as Code. This role is essential to ensuring secure, scalable, and resilient connectivity across hybrid and multi-cloud environments. You’ll work closely with cloud engineers, cybersecurity analysts, and program leadership to drive continuous improvement and deliver value to the mission.

Key Responsibilities

· Partner with other program personnel and business stakeholders to understand requirements for each hosted application and translate them into technical solutions or update existing technical solutions.

· Support the overall multi-tenant, multi-cloud environment strategy by supporting development of the overall technological roadmap while balancing support for operational issues with implementation of roadmap components.

· Design, implement, and maintain secure cloud network architectures in AWS, Azure, Google, Oracle, and hybrid environments utilizing network segmentation, Zero Trust principles, and policy-based access controls.

· Assist in development of detailed technical documentation to support operational processes.

· Integrate cloud networks with on-premises DoD infrastructure using VPNs, Direct Connect, ExpressRoute, and SD-WAN.

· Provision and manage network infrastructure using Infrastructure as Code (IaC) tools such as Terraform and Ansible.

· Monitor network performance and troubleshoot connectivity issues using tools like CloudWatch, Azure Monitor, and packet capture utilities.

· Ensure compliance with DoD cybersecurity frameworks including DISA STIGs, NIST 800-53, and RMF.

· Collaborate with cybersecurity, cloud engineering, and application teams to support secure mission delivery.

· Maintain a continuous improvement mindset and provide feedback to process refinement activities.

· Partner with business stakeholders to understand requirements and translate them into architecture technical solutions.

· Participate in architectural reviews and provide recommendations and guidance on complex technical and architectural decisions.

· Present architectural designs and recommendations to leadership.

Minimum Qualifications

· Bachelors and 10 years of experience; Masters and 8 years of experience. Additional experience may be accepted in lieu of degree.

· Interim Secret clearance required to start; ability to obtain Secret clearance required to maintain employment.

· US citizenship required.

· Certifications: CompTIA Security or equivalent (IAT-2). If expired, renewal of certification will be required to begin work.

· Proficiency in cloud networking services (VPCs, VNets, Transit Gateway, NSGs, Route Tables).

· Experience working with technical teams in cloud, cybersecurity, or enterprise IT environments.

· Strong understanding of TCP/IP, BGP, DNS, NAT, and VPN technologies.

· Excellent facilitation, communication, and stakeholder engagement skills.

· Ability to work in a fast-paced, mission-driven environment.

· Strong documentation, communication, and cross-functional collaboration skills.

Preferred Qualifications

· Certifications such as Versa Certified SD-WAN Engineer, F5-CTS, AWS Advanced Networking, or Azure Network Engineer Associate.

· Experience with (or strong interest in) using Infrastructure as Code to reduce toil and improve consistency.

· Experience with USAF Cloud One, Platform 1, or DoD network architecture.

· Hands-on experience with Versa Networks SD-WAN and security platforms.

· Experience configuring and managing F5 BIG-IP LTM, GTM, and ASM modules.

· Familiarity with Zero Trust Architecture and DoD cloud security requirements.

· Scripting and automation experience (Python, Bash, PowerShell, CloudFormation, ARM/Bicep).

· Experience in Site Reliability Engineering, DevOps, or Cloud Infrastructure roles.

· Cloud certifications in AWS, Azure, Google, or Oracle clouds.

· Example certifications include Certified Kubernetes Application Developer (CKAD), Kubernetes and Cloud Native Associate (KCNA), AWS Certified DevOps Engineer, Certified AWS SysAdmin, AWS Certified Advanced Networking, AWS Certified Security, Azure Developer Associate, Azure Solutions Architect, Terraform Associate, Terraform Authoring and Operations Professional.

· Knowledge of ICAM integration and cross-domain solutions.