Job description
AmeriSave Mortgage Corporation is currently seeking a Cloud Network Engineer to join our Network Infrastructure team. This role supports enterprise network and network security architecture for AmeriSave Mortgage, spanning multiple Azure regions, OpenShift microservice clusters, corporate offices, and our SASE and edge security platforms.
What You'll Do
Architect, deploy, and troubleshoot Azure network topologies including VNETs, peering, user-defined routing, Private Link/Private Endpoints, Virtual WAN, Application Gateway, Azure Load Balancer, NSGs, and hybrid connectivity via ExpressRoute and IPSec.
Administer and troubleshoot FortiGate firewalls — policy design, IPS, web filtering, SSL inspection, SD-WAN, and Layer 3/4 segmentation — across cloud and on-premise environments.
Support and administer Cisco Meraki cloud-managed networking across MX security appliances, MS switches, and MR wireless access points — including dashboard and template configuration, SD-WAN, VLAN and SSID design, firmware management, and corporate/branch office deployments.
Operate and tune the FortiSASE platform: ZTNA, cloud-delivered secure web gateway, SPA/SIA tunnels, PoP selection, and identity-aware access policy for the remote workforce.
Design and support Kubernetes/OpenShift networking (OVN-Kubernetes SDN), including ingress/egress control, service exposure, and granular network policy across multi-cluster deployments.
Configure and troubleshoot ingress controllers — Traefik and/or NGINX — covering routing rules, TLS termination, certificate handling, and upstream service health.
Manage Cloudflare: WAF custom and managed rules, bot management, load balancing and origin pools, DNS zone administration, and Zero Trust policy.
Maintain internal and external DNS, certificate lifecycle, and load balancer (FortiADC) configurations.
Partner with application, security, and cloud teams on deployments, incident response, and root cause analysis.
Produce accurate network diagrams and documentation; perform changes in accordance with established SOP and change management guidelines.
Configuration of DataDog Network monitoring and alerting
What You Bring
At least 7 years of enterprise networking experience, with a minimum of 4 years focused on cloud networking (Azure preferred).
Hands-on production experience administering FortiGate firewalls.
Demonstrated Azure networking experience (VNETs, NSGs, UDRs, ExpressRoute, Private Link, native load balancing).
Working experience with a SASE platform — FortiSASE strongly preferred.
Practical Kubernetes/OpenShift networking experience, including CNI behavior, services, and network policy.
Configuration experience with Traefik or NGINX ingress controllers.
Production experience with Cloudflare — WAF, load balancing, and DNS.
Solid protocol fundamentals: BGP, OSPF, DNS, DHCP, TLS/PKI, VRRP, RADIUS/TACACS+.
Scripting and automation ability (Python, PowerShell, or Terraform) with Git-based workflows.
Strong attention to detail, problem analysis, and problem-solving skills.
Excellent written and verbal communication skills; ability to work independently and as part of a team, including after hours support as needed.
BS degree in Computer Science, Engineering, MIS/CIS, or a related subject, or equivalent experience.
Preferred Qualifications
Fortinet NSE 4+ certification
Microsoft AZ-700 (Azure Network Engineer Associate)
CCNA/CCNP
CKA (Certified Kubernetes Administrator)
FortiADC, FortiManager, and FortiAnalyzer experience
Experience with certificate lifecycle automation platforms
Experience with observability tooling such as Datadog
High-speed internet required for remote work, Cable or Fiber ONLY with the ability to connect via Ethernet. Minimum speeds: 70/30 Mbps (basic), 200-300/35-70 Mbps (shared), 500-1,000/100+ Mbps (heavy use).
**Please note that the compensation and benefit information that follows is a good faith estimate for this position only and is provided pursuant to applicable state and local laws on pay transparency. It is estimated based on what a successful applicant in the relevant state might be paid. **
Compensation:
The annual compensation for this position generally ranges between $115,000 - $150,000.
Benefits:
401(k)
Dental insurance
Disability insurance
Employee discounts
Health insurance
Life insurance
Paid time off
12 paid holidays per year
Paid training
Referral program
Vision insurance
Supplemental pay types:
Referral bonuses
AmeriSave is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
California Consumer Privacy Act Disclosure Acknowledgment
Employment Applicants, New Hires, and Employees Residing in California
AmeriSave Mortgage Corporation’s Privacy Policy Statement (“Policy”) can be reviewed here:www.amerisave.com/privacy-policy
AmeriSave Mortgage Corporation’s California Consumer Privacy Act (“CCPA”) Recruitment Disclosure can be reviewed here:
When AmeriSave’s Human Resources Department makes future requests for personal information, the same Policy is applicable. By applying, you understand this acknowledgment covers current and future personal information requests. You also acknowledge the business purpose of the personal information collected and that future requests may occur while applying for a position at AmeriSave and/or during employment, if applicable.
Originally posted on Himalayas
Who can apply
Eligible countries: United States. Accepted UTC offsets: UTC-10, UTC-9, UTC-8, UTC-7, UTC-6, UTC-5, UTC+14. Review the full description for employer-specific work authorization, residency and schedule requirements.