Senior Cloud Network Engineer (Azure, AWS, OCI , BGP, Fortinet)

Job Title: Senior Cloud Network Engineer (Azure, AWS, OCI, BGP, Fortinet) Key Responsibilities • Design and implement cloud network architectures across Azure (VNet, ExpressRoute, VPN Gateway), AWS (VPC, TGW, Direct Connect), and OCI (VCN, DRG, FastConnect) • Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering • Troubleshoot network connectivity issues across hybrid and multi-cloud environments, including asymmetric routing, firewall drops, and DNS resolution failures • Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection • Configure NSGs, UDRs, Security Lists, NACLs, and route propagation across cloud platforms • Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes • Manage DNS architecture, including Azure Private DNS Zones, Route 53 Private Hosted Zones, OCI DNS, and custom resolvers • Collaborate with CGI and third-party network providers on change management and incident resolution • Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics • Produce and maintain network architecture diagrams, runbooks, and change documentation Required Qualifications • 6+ years of networking experience with 4+ years in cloud network engineering • Deep expertise in Azure Networking: VNet, ExpressRoute, VPN Gateway, Azure Firewall, and Azure DNS • Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, and PrivateLink • Hands-on experience with OCI Networking: VCN, DRG, FastConnect, and Security Lists • Experience with BGP routing, route summarization, and AS-PATH manipulation • Proficiency with Fortinet FortiGate NVA configuration (policies, routing, HA failover) • Understanding of DNS resolution across hybrid environments (conditional forwarders and Private DNS Zones) • Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred • AWS Advanced Networking Specialty Nice to Have • Experience working alongside MSP/carrier-managed ExpressRoute environments • Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures