Senior Cloud Network Engineer (Azure, AWS, OCI , BGP, Fortinet)

Job Title: Senior Cloud Network Engineer (Azure, AWS, OCI, BGP, Fortinet) Key Responsibilities

• Design and implement cloud network architectures across Azure (VNet, Express. Route, VPN Gateway), AWS (VPC, TGW, Direct Connect), and OCI (VCN, DRG, Fast. Connect)
• Configure and manage BGP routing across Express. Route Cloud. Link circuits and on-premise peering
• Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including asymmetric routing, firewall drops, and DNS resolution failures
• Manage Fortinet NGFW (Forti. Gate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection
• Configure NSGs, UDRs, Security Lists, NACLs, and route propagation across cloud platforms
• Support Express. Route gateway SKU upgrades and circuit bandwidth changes
• Manage DNS architecture, including Azure Private DNS Zones, Route 53 Private Hosted Zones, OCI DNS, and custom resolvers
• Collaborate with CGI and third-party network providers on change management and incident resolution
• Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics
• Produce and maintain network architecture diagrams, runbooks, and change documentation Required Qualifications
• 6+ years of networking experience with 4+ years in cloud network engineering
• Deep expertise in Azure Networking: VNet, Express. Route, VPN Gateway, Azure Firewall, and Azure DNS
• Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, and Private. Link
• Hands-on experience with OCI Networking: VCN, DRG, Fast. Connect, and Security Lists
• Experience with BGP routing, route summarization, and AS-PATH manipulation
• Proficiency with Fortinet Forti. Gate NVA configuration (policies, routing, HA failover)
• Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones)
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
• AWS Advanced Networking Specialty Nice to Have
• Experience working alongside MSP/carrier-managed Express. Route environments
• Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures