Note: The job is a remote job and is open to candidates in USA. AgreeYa is a global Systems Integrator seeking an experienced Cloud Network Engineer with hands-on DNS expertise. The role focuses on designing, implementing, and operating cloud networking solutions across hybrid environments, with particular emphasis on DNS architecture and traffic management.

Responsibilities

• Design and manage cloud networking components:
• AWS VPC / Azure VNet
• Subnets, route tables, gateways
• Implement hybrid connectivity:
• Site-to-site VPN
• Client VPN
• Exposure to ExpressRoute / Direct Connect
• Configure and maintain:
• Route tables (static + dynamic)
• Basic BGP configurations (under guidance)
• Support traffic flow optimization and routing decisions
• Troubleshoot routing issues:
• Connectivity failures
• Misconfigured routes
• Latency or asymmetric routing
• Manage DNS zones, records, and configurations to ensure proper domain resolution and minimize downtime
• Implement DNS security best practices, such as DNSSEC, to protect DNS infrastructure
• Migrate the current Infrastructure code for DNS records to Terraform
• Utilizing CI/CD methodology, ensure changes are implemented via pipelines and can eaasily backout
• Enable self-service DNS change management using IaC and CI/CD automation
• Assist with automation of network provisioning and configuration
• Maintain version-controlled network configurations
• Monitor network/DNShealth using cloud-native tools:
• Azure Monitor, AWS CloudWatch
• Investigate and resolve Level 2 network incidents
• Participate in on-call rotation (if applicable)
• Implement and maintain:
• NSGs / Security Groups
• Network ACLs
• Assist in enforcing segmentation and least-privilege access
• Support secure connectivity patterns (private endpoints, service endpoints)
• Maintain network diagrams and configuration documentation
• Develop and maintain runbooks for Cloud Network-related operations and incident response
• Identify opportunities for:
• Performance improvement
• Cost optimization (e.g., NAT gateway usage, egress traffic)
• Contribute to standardization of network design patterns

Skills

• Solid understanding of: TCP/IP, DNS, routing fundamentals, Subnetting and CIDR
• In-depth knowledge of DNS, DNSSEC, and BIND
• Experience with cloud-based DNS services such as AWS Route 53 and Azure DNS
• Knowledge of Linux Bind servers and Windows DNS
• Hands-on experience with at least one cloud platform: AWS or Azure
• Familiarity with Infrastructure as Code (IaC) tools like Terraform, and Ansible
• Strong troubleshooting and analytical thinking
• Ability to work independently on standard tasks
• Scripting/automation mindset
• Excellent communication and documentation skills
• Experience with hybrid cloud networking (on-prem to AWS/Azure)
• VPN configurations and troubleshooting
• Exposure to BGP routing concepts
• Load balancing
• AD-DNS, Route 53, Azure DNS
• Linux, Bind and SVN

Company Overview

Company H1B Sponsorship