Job description

AmeriSave Mortgage Corporation is currently seeking a Cloud Network Engineer to join our Network Infrastructure team. This role supports enterprise network and network security architecture for AmeriSave Mortgage, spanning multiple Azure regions, OpenShift microservice clusters, corporate offices, and our SASE and edge security platforms. What You'll Do • Architect, deploy, and troubleshoot Azure network topologies including VNETs, peering, user-defined routing, Private Link/Private Endpoints, Virtual WAN, Application Gateway, Azure Load Balancer, NSGs, and hybrid connectivity via ExpressRoute and IPSec. • Administer and troubleshoot FortiGate firewalls — policy design, IPS, web filtering, SSL inspection, SD-WAN, and Layer 3/4 segmentation — across cloud and on-premise environments. • Support and administer Cisco Meraki cloud-managed networking across MX security appliances, MS switches, and MR wireless access points — including dashboard and template configuration, SD-WAN, VLAN and SSID design, firmware management, and corporate/branch office deployments. • Operate and tune the FortiSASE platform: ZTNA, cloud-delivered secure web gateway, SPA/SIA tunnels, PoP selection, and identity-aware access policy for the remote workforce. • Design and support Kubernetes/OpenShift networking (OVN-Kubernetes SDN), including ingress/egress control, service exposure, and granular network policy across multi-cluster deployments. • Configure and troubleshoot ingress controllers — Traefik and/or NGINX — covering routing rules, TLS termination, certificate handling, and upstream service health. • Manage Cloudflare: WAF custom and managed rules, bot management, load balancing and origin pools, DNS zone administration, and Zero Trust policy. • Maintain internal and external DNS, certificate lifecycle, and load balancer (FortiADC) configurations. • Partner with application, security, and cloud teams on deployments, incident response, and root cause analysis. • Produce accurate network diagrams and documentation; perform changes in accordance with established SOP and change management guidelines. • Configuration of DataDog Network monitoring and alerting What You Bring • At least 7 years of enterprise networking experience, with a minimum of 4 years focused on cloud networking (Azure preferred). • Hands-on production experience administering FortiGate firewalls. • Demonstrated Azure networking experience (VNETs, NSGs, UDRs, ExpressRoute, Private Link, native load balancing). • Working experience with a SASE platform — FortiSASE strongly preferred. • Practical Kubernetes/OpenShift networking experience, including CNI behavior, services, and network policy. • Configuration experience with Traefik or NGINX ingress controllers. • Production experience with Cloudflare — WAF, load balancing, and DNS. • Solid protocol fundamentals: BGP, OSPF, DNS, DHCP, TLS/PKI, VRRP, RADIUS/TACACS+. • Scripting and automation ability (Python, PowerShell, or Terraform) with Git-based workflows. • Strong attention to detail, problem analysis, and problem-solving skills. • Excellent written and verbal communication skills; ability to work independently and as part of a team, including after hours support as needed. • BS degree in Computer Science, Engineering, MIS/CIS, or a related subject, or equivalent experience. Preferred Qualifications • Fortinet NSE 4+ certification • Microsoft AZ-700 (Azure Network Engineer Associate) • CCNA/CCNP • CKA (Certified Kubernetes Administrator) • FortiADC, FortiManager, and FortiAnalyzer experience • Experience with certificate lifecycle automation platforms • Experience with observability tooling such as Datadog High-speed internet required for remote work, Cable or Fiber ONLY with the ability to connect via Ethernet. Minimum speeds: 70/30 Mbps (basic), 200-300/35-70 Mbps (shared), 500-1,000/100+ Mbps (heavy use). **Please note that the compensation and benefit information that follows is a good faith estimate for this position only and is provided pursuant to applicable state and local laws on pay transparency. It is estimated based on what a successful applicant in the relevant state might be paid. ** Compensation: The annual compensation for this position generally ranges between $115,000 - $150,000. Benefits: • 401(k) • Dental insurance • Disability insurance • Employee discounts • Health insurance • Life insurance • Paid time off • 12 paid holidays per year • Paid training • Referral program • Vision insurance Supplemental pay types: • Referral bonuses AmeriSave is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. California Consumer Privacy Act Disclosure Acknowledgment Employment Applicants, New Hires, and Employees Residing in California AmeriSave Mortgage Corporation’s Privacy Policy Statement (“Policy”) can be reviewed here: www.amerisave.com/privacy-policy AmeriSave Mortgage Corporation’s California Consumer Privacy Act (“CCPA”) Recruitment Disclosure can be reviewed here: amerisave.com When AmeriSave’s Human Resources Department makes future requests for personal information, the same Policy is applicable. By applying, you understand this acknowledgment covers current and future personal information requests. You also acknowledge the business purpose of the personal information collected and that future requests may occur while applying for a position at AmeriSave and/or during employment, if applicable.

Requirements

Must-haves

Administer and troubleshoot FortiGate firewalls — policy design, IPS, web filtering, SSL inspection, SD-WAN, and Layer 3/4 segmentation — across cloud and on-premise environments.
Operate and tune the FortiSASE platform: ZTNA, cloud-delivered secure web gateway, SPA/SIA tunnels, PoP selection, and identity-aware access policy for the remote workforce.
Design and support Kubernetes/OpenShift networking (OVN-Kubernetes SDN), including ingress/egress control, service exposure, and granular network policy across multi-cluster deployments.
Configure and troubleshoot ingress controllers — Traefik and/or NGINX — covering routing rules, TLS termination, certificate handling, and upstream service health.
Manage Cloudflare: WAF custom and managed rules, bot management, load balancing and origin pools, DNS zone administration, and Zero Trust policy.
Maintain internal and external DNS, certificate lifecycle, and load balancer (FortiADC) configurations.
Partner with application, security, and cloud teams on deployments, incident response, and root cause analysis.
Produce accurate network diagrams and documentation; perform changes in accordance with established SOP and change management guidelines.
Configuration of DataDog Network monitoring and alerting
Hands-on production experience administering FortiGate firewalls.
Demonstrated Azure networking experience (VNETs, NSGs, UDRs, ExpressRoute, Private Link, native load balancing).
Practical Kubernetes/OpenShift networking experience, including CNI behavior, services, and network policy.
Configuration experience with Traefik or NGINX ingress controllers.
Production experience with Cloudflare — WAF, load balancing, and DNS.
Solid protocol fundamentals: BGP, OSPF, DNS, DHCP, TLS/PKI, VRRP, RADIUS/TACACS+.
Scripting and automation ability (Python, PowerShell, or Terraform) with Git-based workflows.
Strong attention to detail, problem analysis, and problem-solving skills.
Excellent written and verbal communication skills; ability to work independently and as part of a team, including after hours support as needed.
BS degree in Computer Science, Engineering, MIS/CIS, or a related subject, or equivalent experience.
Fortinet NSE 4+ certification
Microsoft AZ-700 (Azure Network Engineer Associate)

Nice-to-haves

At least 7 years of enterprise networking experience, with a minimum of 4 years focused on cloud networking (Azure preferred).
Working experience with a SASE platform — FortiSASE strongly preferred.
Preferred Qualifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurekubernetespython

Platform: jobvite
Effort: medium

Benefits

Benefits detected in the listing.

Health Insurance

Dental

Vision

401(K)

Paid Time Off