Role Description We are seeking a Cloud Networking Engineer to design, deploy, and operate cloud networking infrastructure across one or more major cloud providers. The role covers: - VPC/VNet design - Hybrid connectivity - Transit topologies - Edge networking - DNS - Security controls for reliable and safe cloud networking The ideal candidate combines deep traditional networking knowledge with cloud-native networking patterns, has built production cloud networks at meaningful scale, and brings strong automation discipline to networking work. In this role, you will work closely with cross-functional partners — product, design, engineering, operations, and business stakeholders — to translate ambiguous requirements into well-engineered solutions. You will be expected to raise the bar through code review, design review, and mentorship of more junior engineers. The successful candidate brings strong engineering discipline, a clear communication style, and a track record of shipping meaningful work that holds up well in production. Qualifications - Bachelor’s degree in Computer Science, Networking, or a related field. - Five or more years of experience in networking, with significant time on cloud networking. - Deep hands-on experience with networking on at least one major cloud provider. - Strong understanding of routing, switching, BGP, and modern networking fundamentals. - Hands-on experience with hybrid connectivity (Direct Connect, ExpressRoute, or equivalents). - Experience with infrastructure-as-code for cloud networking, especially Terraform. - Strong understanding of cloud security and network controls. - Familiarity with Kubernetes networking and service mesh fundamentals. - Strong troubleshooting and packet-level analysis skills. - Excellent communication and collaboration skills. Requirements - Design and operate cloud networking architectures including VPC/VNet, subnets, routing, and security groups. - Build transit hub topologies using AWS Transit Gateway, Azure Virtual WAN, or GCP Network Connectivity Center. - Design and implement hybrid connectivity using Direct Connect, ExpressRoute, Cloud Interconnect, and VPN. - Architect edge networking including CDN, global load balancing, and WAF integration. - Implement DNS strategies including Route 53, Azure DNS, or Cloud DNS with hybrid resolution. - Design private connectivity to managed services using PrivateLink, Private Endpoints, or Private Service Connect. - Automate cloud networking with Terraform, providing infrastructure-as-code coverage across the network estate. - Implement network security controls including firewalls, NACLs, security groups, and DDoS protection. - Operate Kubernetes networking including CNI selection, ingress strategies, and service exposure patterns. - Build observability for cloud networking including flow logs, traffic insights, and packet capture. - Drive cost optimization including data transfer reduction and right-sizing of network resources. - Partner with security teams to harden the network perimeter and enforce zero-trust principles. - Troubleshoot complex cloud networking issues across cloud and hybrid environments. - Stay current with cloud networking platform updates and emerging patterns. Benefits - Competitive base salary commensurate with experience. - Full-time, direct W2 employment with Bright Vision Technologies. - Long-term, multi-year engagement aligned to the Bright Vision SOW delivery roadmap. How to Apply For immediate consideration, please send your resume to [email protected] or contact us at (908) 676-4399. Learn more about Bright Vision Technologies at www.bvteck.com .

• Support security configuration and monitoring across AWS • Perform secure configuration reviews covering IAM, network security, logging, and monitoring • Identify misconfigurations and provide remediation guidance aligned with security best practices • Monitor and triage CSPM alerts and findings • Conduct risk analysis of vulnerabilities and misconfigurations • Support remediation efforts and validate corrective actions • Maintain dashboards and security posture reporting metrics • Monitor and analyze EDR alerts and threats • Support containment, investigation, and escalation processes • Assist in incident response (IR) activities and documentation • Perform alert monitoring, prioritization, and triage across cloud, endpoint, and email systems • Tune detection rules to reduce false positives and improve efficiency • Ensure timely response aligned with SLAs and security procedures • Implement security best practices including least privilege IAM, encryption, and vulnerability management • Align cloud environments with compliance and security standards • Recommend continuous improvements to overall security posture • Develop automation scripts using Python

• Handles advanced engineering escalations tied to cloud-connected endpoint services • Device enrollment, authentication failures, endpoint compliance, asset/device reconciliation, telemetry gaps • Service Desk runbook transfer • Bridge tickets into engineering remediation

• Own the architecture for cloud-native data platforms, including Lakehouse designs (Delta Lake, Iceberg, Databricks, or Microsoft Fabric) that support reporting, analytics, and BI • Design scalable data models supporting enterprise platforms, including ERP, financial, operational, and project management systems • Lead modernization initiatives for legacy data environments, including migration strategy, data mapping/transformation, reconciliation, and cutover to production • Build frameworks for real-time and near real-time data ingestion and processing, alongside batch pipelines (ELT/ETL) • Drive decisions across storage, orchestration, data quality, reliability, and performance • Define semantic data models that enable self-service analytics and consistent reporting, in coordination with data governance, metadata management, and master data management (MDM) standards • Partner with business and technical stakeholders across functional areas to prioritize requirements and translate them into architectural decisions • Support secure, governed data access in coordination with Identity and Access Management (IAM) teams • Evaluate emerging technologies, including AI, and identify opportunities to apply them within the data ecosystem; help shape the long-term technical roadmap • Mentor junior architects and data management staff, and translate complex technical concepts into clear, business-friendly language for technical and non-technical audiences alike