Staff Cloud Engineer - Networking

Bill.com Bill.com · Fintech · Draper, UT +1 · Engineering

Staff Cloud Network Engineer responsible for designing, implementing, and managing AWS network platform, including hub-and-spoke and multi-region topologies, inter-VPC connectivity, and network security. Requires expertise in Terraform, networking protocols, and network monitoring.

What you'd actually do

  1. Lead the design and evolution of our AWS network platform.
  2. Act as the go to expert for cloud networking, partnering closely with infrastructure, security, and product engineering teams to ensure our network enables performance, reliability, and growth.
  3. Architecting and operating large-scale AWS network environments, including the design and implementation of hub-and-spoke and multi-region topologies using AWS Transit Gateways and AWS Cloud WAN for high availability, scalability, and cost optimization.
  4. Designing inter-VPC and inter-account connectivity patterns (e.g., VPC peering, Transit Gateway attachments, Cloud WAN core networks, and routing domains), including segmentation strategies for production, staging, and non-production workloads.
  5. Automating network configuration using Terraform or similar Infrastructure as Code (IaC) tools, including reusable modules for VPCs, Transit Gateways, Cloud WAN segments, route tables, and security policies.

Skills

Required

  • Minimum of 7 years of relevant experience in network engineering
  • Significant portion of that experience specifically focused on designing, implementing, and managing network infrastructure in AWS or similar cloud environments
  • Proven experience architecting and operating large-scale AWS network environments
  • Hands-on experience designing inter-VPC and inter-account connectivity patterns
  • Proficiency in Terraform or similar Infrastructure as Code (IaC) tools
  • In-depth knowledge of networking protocols, including TCP/IP, BGP, OSPF, VLANs, VPNs, and DNS
  • Specialized experience managing Amazon Route 53 hosted zones and Cloudflare DNS/CDN configurations
  • Strong understanding of network security principles and best practices
  • Experience with network monitoring and performance optimization tools such as CloudWatch, VPC Flow Logs, and AWS Direct Connect
  • Ability to collaborate effectively with cross-functional teams
  • Excellent troubleshooting and problem-solving skills
  • Proven track record of designing and implementing scalable and resilient network solutions in a production environment
  • Strong communication skills and the ability to articulate network architecture and design decisions

Nice to have

  • AWS certification(s) such as AWS Certified Solutions Architect – Associate or AWS Certified Advanced Networking – Specialty

What the JD emphasized

  • architecting and operating large-scale AWS network environments
  • AWS Transit Gateways
  • AWS Cloud WAN
  • inter-VPC and inter-account connectivity
  • Terraform
  • TCP/IP, BGP, OSPF, VLANs, VPNs, and DNS
  • Amazon Route 53
  • Cloudflare DNS/CDN
  • network security principles and best practices
  • network monitoring and performance optimization
  • troubleshooting and problem-solving skills
  • designing and implementing scalable and resilient network solutions