Network Engineer With Gcp Chicago Il

Role: Network Engineer with GCP

Location: Chicago, IL Hybrid role

Job description:

8+ years in enterprise networking, including 4+ years implementing GCP network foundations and hybrid connectivity.

Role Summary

Design-validate, implement, and coordinate the GCP landing-zone networking scope, with particular focus on dual-region connectivity, routing, segmentation, private access, ingress/egress controls, and client-managed external connectivity.

Key Responsibilities

1. Validate the approved GCP network design, IP plan, routing model, DNS approach, connectivity dependencies, security controls, and implementation sequence.
2. Lead implementation and validation of VPCs, subnets, Shared VPC patterns, NCC, route domains, Cloud Routers, VPC peerings, PSC endpoints, private access, load balancers and firewall policies.
3. Create Cloud Interconnect/NCC implementation steps and coordinate with client and carrier teams responsible for circuit procurement and activation.
4. Provide configuration specifications and validation support for client-managed Cisco FTDv and Umbrella components.
5. Validate routing, failover, region resiliency, ingress/egress paths, DNS resolution, reachability, flow logs, and network security controls.
6. Partner with Terraform engineers to codify reusable network modules, variables, validation checks, and deployment pipelines.
7. Document as-built network configurations, test evidence, operational procedures, risks, and dependencies.
8. Act as the onshore network focal point for workshops, design clarifications, client coordination, and issue resolution.

Required Qualifications and Skills

1. Deep hands-on GCP networking expertise: VPC, Shared VPC, NCC, Cloud Router, Cloud Interconnect, PSC, peering, Cloud DNS, load balancing, Cloud Armor and firewall policies.
2. Strong understanding of BGP, hybrid connectivity, routing segmentation, high availability, DR, IP address planning and network security.
3. Terraform experience for GCP network resources and familiarity with Azure DevOps pipelines.
4. Ability to troubleshoot cloud-to-on-premises and inter-VPC connectivity using logs and diagnostic tools.
5. Strong client-facing communication and network documentation skills.

Preferred Qualifications

1. Google Professional Cloud Network Engineer certification.
2. Experience with Cisco FTDv, Umbrella, Network Intelligence Center and enterprise SIEM integration.

Expected Work Products

1. Validated GCP network implementation plan
2. Terraform-ready network specifications and reviewed code
3. Connectivity and security validation evidence
4. As-built network document and runbook inputs

Success Measures

1. Assigned scope is implemented in accordance with approved designs and agreed standards.
2. Implementation is automated, peer-reviewed, tested, documented, and supported by clear validation evidence.
3. Risks, dependencies, design gaps, and scope variances are identified and communicated early.
4. Knowledge transfer and handover enable the client operations team to support the landing zone.