astra-north

Cloud Network Engineer – Azure, AWS, OCI & Fortinet

astra-north

Toronto, Ontario, CanadaContractPosted Jul 8, 2026

Job description

Cloud Network Engineer – Azure, AWS, OCI & Hybrid Networking Experience:

  • 6–8 years Essential Skills:
  • More than 5 years of networking experience with 4+ years in cloud network engineering.
  • Deep expertise in Azure Networking:
  • VNet
  • Express. Route
  • VPN Gateway
  • Azure Firewall
  • Azure DNS
  • Strong knowledge of AWS Networking:
  • VPC
  • Transit Gateway (TGW)
  • Direct Connect
  • Route 53
  • ALB / NLB
  • Private. Link
  • Hands-on experience with OCI Networking:
  • VCN
  • DRG
  • Fast. Connect
  • Security Lists
  • Experience with:
  • BGP routing
  • Route summarization
  • AS-PATH manipulation
  • Proficiency with Fortinet Forti. Gate NVA configuration:
  • Policies
  • Routing
  • HA failover
  • Understanding of DNS resolution across hybrid environments:
  • Conditional forwarders
  • Private DNS Zones
  • Certifications:
  • Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
  • AWS Advanced Networking Specialty Role & Responsibilities:
  • Design and implement cloud network architectures across:
  • Azure:
  • VNet
  • Express. Route
  • VPN Gateway
  • AWS:
  • VPC
  • TGW
  • Direct Connect
  • OCI:
  • VCN
  • DRG
  • Fast. Connect
  • Configure and manage BGP routing across:
  • Express. Route circuits
  • Cloud. Link circuits
  • On-premise peering
  • Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including:
  • Asymmetric routing
  • Firewall drops
  • DNS resolution failures
  • Manage Fortinet NGFW (Forti. Gate) NVA configurations on Azure and OCI for:
  • North-south traffic inspection
  • East-west traffic inspection
  • Configure:
  • NSGs
  • UDRs
  • Security Lists
  • NACLs
  • Route propagation across cloud platforms
  • Support:
  • Express. Route gateway SKU upgrades
  • Circuit bandwidth changes
  • Manage DNS architecture:
  • Azure Private DNS Zones
  • Route 53 Private Hosted Zones
  • OCI DNS
  • Custom resolvers
  • Collaborate with CGI and third-party network providers on:
  • Change management
  • Incident resolution
  • Investigate:
  • VPC Flow Log data
  • Azure Network Watcher logs
  • Produce and maintain:
  • Network architecture diagrams
  • Runbooks
  • Change documentation Nice to Have Skills:
  • Experience working with MSP/carrier-managed Express. Route environments.
  • Knowledge of:
  • SASE
  • SD-WAN
  • Zscaler Private Access (ZPA) architectures.