Role: Network Engineer
Location: Toronto, ON
Duration: Long term Contract
Job Description:
Design and implement cloud network architectures across Azure (VNet| ExpressRoute| VPN Gateway)| AWS (VPC| TGW| Direct Connect)| and OCI (VCN| DRG| FastConnect).Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering.Troubleshoot network connectivity issues across hybrid and multi-cloud environments including asymmetric routing| firewall drops| and DNS resolution failures.Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection.Configure NSGs| UDRs| Security Lists| NACLs| and route propagation across cloud platforms.Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes.Manage DNS architecture: Azure Private DNS Zones| Route 53 Private Hosted Zones| OCI DNS| and custom resolvers.Collaborate with CGI and third-party network providers on change management and incident resolution.Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics.Produce and maintain network architecture diagrams| runbooks| and change documentation.
Essential Skills: More than 5 years of networking experience with 4+ years in cloud network engineering. Deep expertise in Azure Networking: VNet| ExpressRoute| VPN Gateway| Azure Firewall| Azure DNS. Strong knowledge of AWS Networking: VPC| TGW| Direct Connect| Route 53| ALB/NLB| PrivateLink. Hands-on experience with OCI Networking: VCN| DRG| FastConnect| Security Lists. Experience with BGP routing| route summarization| and AS-PATH manipulation. Proficiency with Fortinet FortiGate NVA configuration (policies| routing| HA failover). Understanding of DNS resolution across hybrid environments (conditional forwarders| Private DNS Zones). Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred. AWS Advanced Networking Specialty.Nice to Have1. Experience working alongside MSP/carrier-managed ExpressRoute environments.2. Knowledge of SASE| SD-WAN| or Zscaler Private Access (ZPA) architectures.
