Senior Cloud Infrastructure Networking Engineer

BETSOL is a cloud-first digital transformation and data management company offering products and IT services to enterprises in over 40 countries. BETSOL team holds several engineering patents, is recognized with industry awards, and BETSOL maintains a net promoter score that is 2x the industry average.

BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and best-in-class performance.

BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for its customers.

BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore, India.

We take pride in being an employee-centric organization, offering comprehensive health insurance, competitive salaries, 401K, volunteer programs, and scholarship opportunities. Office amenities include a fitness center, cafe, and recreational facilities.

Learn more at betsol.com

The Cloud Infrastructure Networking Engineer is responsible for designing and implementing the enterprise data architecture. This role will lead the development of scalable, secure, and integrated data platforms to support analytics, compliance, and business operations.

This role will be the cloud networking authority for the AWS environment. This role owns the design, operations, and reliability of everything from VPC architecture and firewall policy to remote access and infrastructure automation. This role also brings strong systems-engineering instincts: incident leadership, monitoring hygiene, and the drive to reduce operational toil over time.

This is a high-autonomy individual contributor role. This role sets direction for networking decisions, make the calls, and drive execution. This role will partner closely with Security and platform engineering, and own the networking domain

Responsibilities

AWS Cloud Networking

• Design and operate VPCs, subnets, routing, segmentation, ingress/egress patterns, security boundaries, and VPC endpoints/PrivateLink-style connectivity
• Define scalable networking standards that make workload onboarding consistent, secure, and repeatable
• Troubleshoot complex connectivity issues across AWS: routing, access controls, DNS resolution patterns

Palo Alto Firewalls & GlobalProtect

• Administer Palo Alto firewall policy lifecycle: safe changes, segmentation strategy, troubleshooting
• Own GlobalProtect remote access operations, stability, access controls, incident response
• Partner with Security to ensure network controls align with risk posture and audit expectations

Infrastructure as Code & Automation

• Build and maintain AWS networking and firewall infrastructure using Terraform (reusable modules, reviewable changes, controlled rollouts)
• Build and maintain GitHub Actions workflows for infrastructure CI/CD (plan/apply gating, workflow reliability)
• Automate operational tasks with Python and Bash (PowerShell is a plus)

Operational Excellence

• Support production infrastructure across Linux and Windows (patching, hardening, reliability improvements)
• Participate in on-call rotation and lead incident response for infrastructure and connectivity issues
• Improve monitoring, alerting, and operational visibility to catch issues earlier
• Drive root-cause analysis and prevention work to reduce repeat incidents

Required

• Deep hands-on experience with AWS cloud networking, design, operations, and troubleshooting (not just consumption)
• Strong operational experience with Palo Alto firewalls and GlobalProtect
• Hands-on Terraform experience, especially for networking (module-oriented, standards driven)
• Experience with CI/CD pipelines for infrastructure (GitHub Actions preferred; GitLab CI or equivalent is fine)
• Solid experience supporting Linux and Windows in production
• Proven ability to lead incidents end-to-end and drive durable fixes not just workarounds
• Strong communication skills and the confidence to operate as the networking authority, setting direction, making decisions, and explaining tradeoffs to non-network audiences
• Participate in on-call rotations

Nice to Have

• Identity experience: Okta administration, SSO/SAML, SCIM
• Experience automating Palo Alto changes via IaC (Panorama API, Terraform provider)
• AWS governance exposure: Account Factory for Terraform, CloudTrail/Config patterns, Organizations
• Strong scripting depth in Python, Bash, or PowerShell
• PCNSE or AWS networking-focused certifications

Working Hours would be EST