Cloud Network Engineer

Information Technology Services (ITS) at the MCCCD is seeking a highly skilled and collaborative Cloud Network Engineer. This role is responsible for the architecture, implementation, and continuous optimization of the District's hybrid cloud network environment. The Cloud Network Engineer will serve as the primary subject matter expert, bridging the gap between on-premises infrastructure and AWS cloud services to ensure a seamless, secure, and high-performance experience for students, faculty, and staff. As a principal-level position, you will work with a high degree of autonomy, define technical standards, and architect solutions that support the user experience while mentoring colleagues on the nuances of cloud-centric networking and connectivity.

Essential Functions

20% - Design & Architecture: Leads the strategic planning and design of scalable, resilient cloud and on-premise network architectures. Architectures include AWS services (VPCs, Transit Gateways, Direct Connect, Route 53) and on-premise infrastructure consisting of enterprise switches, core routers, firewalls, and wireless (Wi-Fi) systems, primarily utilizing Cisco and Arista platforms.

20% - Implementation & Deployment: Engineers, provisions, and maintains robust, high-availability, and low-latency network services across the District's hybrid ecosystem, including centralized data centers, physical campus locations, and multi-cloud environments.

20% - Network Operations: Directs dynamic routing protocols and advanced traffic management strategies to optimize connectivity between physical campuses and cloud-hosted enterprise systems; oversees proactive monitoring, deep-packet troubleshooting, and tier-3 operational support across all physical and cloud networks; Manages telecom and networking service vendors, including the oversight of work orders, support tickets, and Service Level Agreement (SLA) compliance.

15% - Mentorship & Training: Serves as a district-wide technical lead by supporting, training, and providing architectural guidance to junior administrators and cross-functional teams (e.g., DevOps, Systems), fostering a culture of continuous learning and alignment with infrastructure best practices.

15% - Security & Compliance: Collaborates closely with the District Cybersecurity team to implement, manage, and audit on-premise and cloud-native security controls, including Web Application Firewalls (WAF), enterprise firewalls, IPS/IDS, and Network Access Control Lists (NACLs); proactively monitors firewall logs and network telemetry to safeguard institutional data.

10% - Governance & Process: Establishes and documents standard operating procedures (SOPs), network policies, and configuration templates; identifies cloud cost-optimization opportunities and defines robust network disaster recovery strategies to streamline delivery, institutional resilience, and regulatory compliance; performs related duties as assigned.