Rubrik

Rubrik

Rubrik provides cutting-edge data security and protection solutions, including Zero Trust Data Protection and ransomware recovery, to ensure data readiness and business resilience.

IT Services
1K-5K
Founded 2014
$553M raised

Description

  • Design and implement cloud networking solutions across GCP, AWS, Azure, and OCI.
  • Build and maintain hybrid multi-cloud connectivity, including VPC/VNet design, peering, transit gateways, interconnects, ExpressRoute, Direct Connect, and secure tunneling.
  • Support FedRAMP authorization boundaries through network segmentation, traffic isolation, and control documentation aligned with NIST SP 800-53.
  • Develop a unified connectivity fabric for multi-tenant onboarding, service segmentation, traffic routing, and policy enforcement across cloud environments.
  • Implement network observability for end-to-end traffic visibility, flow tracing, correlation ID propagation, diagnostics, and performance analysis.
  • Apply network security controls such as micro-segmentation, zero trust network access, identity-aware routing, firewall policies, and encryption in transit.
  • Partner with security, SRE, developer, and platform teams to onboard services securely and efficiently.
  • Collaborate with GRC and compliance teams on continuous monitoring, POA&M remediation, and ATO maintenance.
  • Use Infrastructure as Code and CI/CD automation to deploy and manage networking infrastructure.
  • Contribute to networking standards, best practices, reusable templates, and infrastructure modernization efforts.

Requirements

  • 5+ years of network engineering experience with hands-on multi-cloud networking.
  • Experience managing Palo Alto Network VM Series firewalls and Palo Alto Prisma.
  • Experience with Arista and Cisco network devices.
  • Experience with EVPN-VxLan, Arista AVD, CVP, and GitOps workflows.
  • Solid understanding of AWS, GCP, Azure, and OCI cloud networking concepts.
  • Experience designing and operating hybrid or multi-cloud environments with high availability and low latency.
  • Strong command of load balancing, DNS, NAT, TLS termination, L7 routing, HTTP/1.1–HTTP/3, and protocol translation.
  • Experience architecting or supporting FedRAMP Moderate or High environments, including boundary definition, segmentation, and NIST SP 800-53 control implementation.
  • Experience with zero trust networking and modern network security design.
  • Expertise in Infrastructure-as-Code tools such as Terraform, CloudFormation, or Pulumi.
  • Strong scripting skills in Python, Bash, or similar languages for automation.
  • Experience with observability and telemetry tools such as OpenTelemetry, FluentBit, Prometheus, Grafana, or Datadog.
  • Excellent communication and leadership skills with the ability to collaborate and influence across engineering and infrastructure teams.
  • Cloud networking certifications such as AWS Advanced Networking, GCP Professional Cloud Network Engineer, or Azure Network Engineer Associate are preferred.
  • Familiarity with FedRAMP authorization processes, System Security Plans (SSPs), and continuous monitoring frameworks is preferred.
  • Experience with service mesh technologies such as Istio, Consul, or Linkerd is preferred.
  • Familiarity with HAProxy, NGINX, Envoy, or other L7 proxies/load balancers is preferred.
  • Experience in compliance-driven or regulated environments, particularly FedRAMP, DoD IL2/IL4, or StateRAMP, is a strong plus.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Manager, Global Network Operations

IonQ 51-250 Internet Software & Services

IonQ is seeking a Network Operations Manager to oversee and scale its global corporate network infrastructure, supporting operations, security, compliance, and integration of newly acquired subsidiaries.

Active Directory Ansible AWS DHCP DNS Fortinet GCP Juniper Python TCP/IP
15 hours, 33 minutes ago

Staff Network Engineer

Archer 251-1K Construction & Engineering

Archer is seeking a Senior Network Engineer in San Jose to lead the modernization of its enterprise network supporting a multi-site, hybrid aerospace environment.

Ansible AWS Cisco Datadog DHCP DNS Grafana Prometheus Python Terraform
16 hours, 3 minutes ago

1701 - Network Engineer III

Sigma Defense 51-250 Wireless Telecommunication Services

Sigma Defense is seeking a Network Engineer III to support DoW network operations by monitoring engineering performance and maintaining system availability and reliability.

16 hours, 18 minutes ago

ISP Network Support Engineer

Pavago IT Services

ISP Network Support Engineer at a remote U.S.-hours ISP company, responsible for supporting live customer-facing network operations and troubleshooting across multi-WAN, SD-WAN, and wireless infrastructure.

Fiber TCP/IP
1 day, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers