Cloud Engineer (Networking & Security)

About the Role:

We are seeking a Cloud Engineer (Networking & Security) to help update, maintain, and secure our cloud infrastructure. This role will primarily support our OpenStack based infrastructure, but it will also include secondary support of our Kubernetes, billing, self-service, and other components. The focus of the role will be supporting the virtual networking foundation of our cloud infrastructure, and in ensuring systems are hardened and compliant with industry standards.

You’ll be deeply involved in managing OpenStack networking components (OVS/OVN, Neutron), configuring automation, and applying security best practices across our infrastructure. This is a hands-on technical role for someone who enjoys solving real-world networking challenges and continuously improving cloud security posture. The ideal candidate will have experience configuring and debugging virtual networking using Open vSwitch (OVS) and Open Virtual Network (OVN) as well as a strong security background including either a security certification or hands on experience with security benchmarks (CIS, etc.). Direct experience with OpenStack is big plus, but candidates with strong Linux based virtual networking and security background should not hesitate to apply.

Key Responsibilities:

• Build and maintain OpenStack network environments, including OVS/OVN and Neutron services.
• Configure and manage overlay networks, VLANs, VXLANs, and routing for multi-tenant environments.
• Implement and manage firewall rules, VPNs, and access policies to protect data and infrastructure.
• Apply system hardening and security baselines across Linux hosts, containers, and OpenStack components.
• Collaborate with other team members to troubleshoot, optimize, and secure network components.
• Automate network configuration and security enforcement using Ansible, Terraform, or similar tools.
• Monitor and analyze network performance, availability, and security events.
• Contribute to vulnerability remediation, patch management, and compliance audits.
• Maintain accurate documentation and network diagrams for internal use and audits.
• Stay current with networking and security trends, recommending improvements and tools as needed.

Required Skills & Experience:

• Strong, hands-on experience in cloud networking, network engineering, or infrastructure security.
• Strong knowledge of Linux virtual networking (OVS, OVN, BIRD/FRR).
• Solid understanding of TCP/IP, DNS, VLANs, VXLANs, routing, and basic BGP/OSPF principles.
• Experience implementing firewalls, load balancers, and VPNs in cloud or virtualized environments.
• Hands-on experience with Linux system administration and hardening.
• Familiarity with automation tools like Ansible, Terraform, or Kolla Ansible.
• Working knowledge of TLS, certificate management, and encryption practices.
• Exposure to vulnerability assessment tools (OpenSCAP, Trivy, Nessus) and patch workflows.
• Scripting ability in Python or Bash for automation and troubleshooting.
• Strong troubleshooting, documentation, and communication skills.

Nice to Have (Preferred Skills):

• Experience with Kubernetes networking and security (Calico, Cilium).
• Knowledge of monitoring and logging tools (Prometheus, Grafana, ELK, or Graylog).
• Exposure to compliance frameworks or standards (CIS Benchmarks, NIST 800-53, ISO 27001).
• Understanding of zero-trust and identity-based networking concepts.
• Certifications such as  CompTIA Network+, CCNA, RHCSA, or Security+.

Qualifications:

• Demonstrated ability to work in production environments and collaborate effectively with cross-functional teams.
• Passion for continuous learning in networking, automation, cloud security, and open-source technologies.

Annual Compensation Range:

$124,000-$174,000 USD base + benefits + equity (If based in the United States)

$115,000-$148,000 CAD base + benefits + equity (If based in Canada)

Note: The salary range listed for this position is a good faith estimate based on experience, qualifications, and internal compensation structure. The actual salary offered varies depending on the candidate's skill level and experience. This posting refers to an active vacancy within the organization.