Specialized Cloud Network Engineer - Multi-Cloud

London Arena, United Kingdom Posted on 29/07/2026

Specialized Cloud Network Engineer -Multi-Cloud Contract Location: London/Belfast (Hybrid) Contract Duration: 12 months initially (with potential extension) Contract Start Date: Immediate Contract Classification: Inside IR35

Job Summary

As a Cloud Network Engineer on the PublicCloud team, you will be a critical enabler of Citi's cloud transformationjourney, with a specialized focus on designing, implementing, and managingcomplex network architectures across our multi-cloud environment (AWS andGoogle Cloud) and integrating them seamlessly with our on-premiseinfrastructure. Our team is dedicated to evolving Citi's application and datahosting environments into an integrated, hybrid multi-cloud ecosystem. We focuson building, automating, and optimizing the foundational cloud networkinfrastructure and services that empower developers to innovate rapidly andsecurely. In this role, you will design, implement, and maintain scalable,resilient, and secure cloud network platforms and solutions, embodying a"you build it, you run it" philosophy to ensure operationalexcellence.

Key Responsibilities

• Multi-Cloud Network Architecture & Engineering: Design, implement, and manage advanced network architecturesacross AWS and GCP, including VPC/VNet design, subnetting, routing, IPaddressing schemes, and network segmentation.
• Hybrid Cloud Connectivity: Establish and maintain robust, high-performance, and secure connectivitybetween on-premise data centers and public cloud environments usingtechnologies such as AWS Direct Connect, Google Cloud Interconnect, VPNs,and SD-WAN integration.
• Network as Code (NaC) & IaC: Develop, maintain, and optimize cloud network infrastructure usingInfrastructure as Code (IaC) tools such as Terraform, CloudFormation(AWS), and Deployment Manager (GCP). Create reusable modules andblueprints for standardized network deployments.
• Advanced Network Services: Configure and manage critical network services including DNS (Route 53,Cloud DNS), Load Balancing (ALB, NLB, Cloud Load Balancing), API Gateways,and Content Delivery Networks (CDNs).
• Network Automation & Orchestration: Automate the provisioning, configuration, and management ofcloud network resources and services. Develop scripts and tools (e.g.,Python, Go, Bash) to streamline network operations, ensure consistency,and improve efficiency.
• Site Reliability Engineering (SRE) for Networks: Embrace a "you build it, you run it" mindset fornetwork services. Take ownership of the reliability, performance, andavailability of the cloud network platforms. Implement robust networkmonitoring, alerting, and logging solutions, and participate in on-callrotations to ensure rapid incident response and resolution fornetwork-related issues.
• Network Security Implementation: Implement and enforce network security best practices, including networkaccess control lists (NACLs), security groups, cloud firewalls (AWS WAF,GCP Firewall Rules), and network intrusion detection/prevention systems.Ensure compliance with Citi's policies, industry standards, and regulatoryrequirements.
• Troubleshooting & Optimization: Perform advanced network troubleshooting and performance optimizationacross hybrid and multi-cloud environments.
• Documentation & Knowledge Sharing: Create and maintain comprehensive documentation for cloudnetwork architectures, configurations, and operational procedures. Mentorjunior engineers and contribute to knowledge sharing within the team.

Required Qualifications & Skills

• Cloud Engineering Expertise: Adeep understanding of public cloud services adoption at scale.Expert-level understanding of AWS/GCP across:
• Internet Application Hosting - Network Segmentation, Securitycontrols, Network Firewall and Packet Mirroring & Inspection andContent Delivery Networks.
• B2B Connectivity - AWS & GCP Experience with Third partyconnectivity patterns, Cloud B2B Architectures and familiarity with VPN,AWS Privatelinks and Google Cloud Private Service Connect.
• Application Resiliency - DNS and DNS Routing, AWS Route53,Load Balancers, Google Cloud CloudDNS, High availability & Resiliencyand API platforms
• Hybrid cloud connectivity solutions (Direct Connect, Cloud Interconnect, VPNs, SD-WAN).
• Networking concepts: TCP/IP, routing protocols (BGP), networksegmentation, firewalls, and network security principles.
• Network monitoring, logging, and alerting tools in a cloudcontext.
• Infrastructure as Code (IaC) Hands-on Expertise: Demonstrable experience with the following:
• Programming Languages: Python and Go.
• Agile and DevOps Mindset: Familiaritywith Agile Development, DevOps, and SRE practices.
• Adaptability: A demonstratedability to quickly learn new technologies and adapt to changing projectrequirements.
• Strategic Thinking: Experienceevaluating complex requirements and rationalizing them into a consistentservice offering.
• Excellent Communication: Theability to effectively communicate technical concepts to both technicaland non-technical audiences.
• Exceptional Teamwork and Collaboration: A proven ability to contribute effectively within across-functional team environment.

Preferred Qualifications & Skills

• Public cloud provider network-specific certifications (e.g.,AWS Certified Advanced Networking - Specialty, Google Cloud ProfessionalNetwork Engineer).
• Experience with network security tools such as WAF, DDoSprotection, and network intrusion detection/prevention systems.
• Familiarity with network virtualization and software-definednetworking (SDN) concepts.
• Experience with container networking (e.g., Kubernetes CNI,service mesh).
• Knowledge of compliance frameworks relevant to financialservices (e.g., PCI DSS, NIST, ISO 27001).
• Experience with network performance testing and optimizationtools.