Astra North Infoteck Inc.
Senior Cloud Network Engineer (Azure, AWS, OCI , BGP, Fortinet)
- Compensation
- Not disclosed
- Location
- Toronto, Canada
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Network engineering
- Posted
Skills
Must have
- • 6+ years of networking experience with 4+ years in cloud network engineering
- • Deep expertise in Azure Networking: VNet, ExpressRoute, VPN Gateway, Azure Firewall, and Azure DNS
- • Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, and PrivateLink
- • Hands-on experience with OCI Networking: VCN, DRG, FastConnect, and Security Lists
- • Experience with BGP routing, route summarization, and AS-PATH manipulation
- • Proficiency with Fortinet FortiGate NVA configuration (policies, routing, HA failover)
- • Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones)
- • Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
- • AWS Advanced Networking Specialty
Nice to have
- • Experience working alongside MSP/carrier-managed ExpressRoute environments
- • Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures
Full description
**Job Title: Senior Cloud Network Engineer (Azure, AWS, OCI, BGP, Fortinet)
Key Responsibilities**
- Design and implement cloud network architectures across Azure (VNet, ExpressRoute, VPN Gateway), AWS (VPC, TGW, Direct Connect), and OCI (VCN, DRG, FastConnect)
- Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering
- Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including asymmetric routing, firewall drops, and DNS resolution failures
- Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection
- Configure NSGs, UDRs, Security Lists, NACLs, and route propagation across cloud platforms
- Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes
- Manage DNS architecture, including Azure Private DNS Zones, Route 53 Private Hosted Zones, OCI DNS, and custom resolvers
- Collaborate with CGI and third-party network providers on change management and incident resolution
- Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics
- Produce and maintain network architecture diagrams, runbooks, and change documentation
**Required Qualifications
- 6+ years of networking experience with 4+ years in cloud network engineering
- Deep expertise in Azure Networking: VNet, ExpressRoute, VPN Gateway, Azure Firewall, and Azure DNS
- Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, and PrivateLink
- Hands-on experience with OCI Networking: VCN, DRG, FastConnect, and Security Lists
- Experience with BGP routing, route summarization, and AS-PATH manipulation
- Proficiency with Fortinet FortiGate NVA configuration (policies, routing, HA failover)
- Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones)
- Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred
- AWS Advanced Networking Specialty
Nice to Have
- Experience working alongside MSP/carrier-managed ExpressRoute environments
- Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures