Network Engineer - Cloud Operations **US Remote**

Job description

Join us in pioneering breakthroughs in healthcare. For everyone. Everywhere. Sustainably. Our inspiring and caring environment forms a global community that celebrates diversity and individuality. We encourage you to step beyond your comfort zone, offering resources and flexibility to foster your professional and personal growth, all while valuing your unique contributions. Varian is seeking a Network Engineer position in support of our Managed Services global business. Our goal is to provide good operational practices and support for the operations, maintenance, and refinement of Varian’s public and private Cloud environments and services. Providing support for new and legacy applications and services hosted in the cloud, and continuous improvement of Varian’s Cloud infrastructure. The candidate will support Varian’s cloud operations to enhance, optimize, and maintain computing capabilities across our entire global cloud solution. Including collaboration with Service, Operations, Product Management and Security. The Network Engineer must have expertise with Cloud Service Providers (CSPs) & Microsoft Azure. Additional responsibilities for delivering support to the infrastructure and deployment of Varian’s applications as a Managed Service, and provide input in developing and maintaining policies, procedures, and standards. The position will receive direction from the Manager of Global Cloud Operations.You are responsible for: Providing network operations and support for Varian’s FullScale Infinity Cloud (FSIC) solutions.  Private, public and hybrid infrastructure, network and security. Leading network onboarding for FSIC designed product adhering to FSIC configuration standards. Maintaining a strong knowledge of Varian’s suite of applications. Configuring various cloud solutions including monitoring, application access, security, Citrix NetScaler, Citrix ADC, Palo Alto Networks, etc. Configuring and supporting backbone connections over ExpressRoute (Azure), and direct connection and VPN architecture. Maintaining allocation of IP CIDR block, perform maintenance involving modification of network, subnets, vlans, routes etc. Verifying and action on events aggregated from network monitoring tools and Web Application Firewall using Varian approved tools. Troubleshooting and determining root cause of issues. Collaborating to quickly resolve any network related outages and resolve customer impacting issues quickly. Contributing to the successful execution of projects. Creating, updating, and completing documentation. Investigate root cause analysis of incidents with follow up reporting and final content generation. Collaborating with network engineers on procedures, techniques, tips & knowledge to improve operations, security and work performed. Providing the highest level of customer service. Advance understanding of vendor and telco/exchange/service providers support escalation paths and being able to escalate support requests to these vendors in a typically urgent and timely fashion. Appling network system updates, patches, configuration changes. Planning network layouts and configures systems to user environments. Serving as a technical mentor to colleagues as necessary. Staying up to date with assigned Learning Management System courses. Eagerness to provide the highest level of customer service. On call support as required. Working schedule North American business hours. Minimum Qualifications: A Bachelor’s or preferably Master’s Degree in computer science is required plus three years’ minimum relevant experience. Varian FSIC, TPASS and CloudPlanner infrastructure product knowledge. Strong knowledge of Varian’s suite of applications. Extensive experience supporting and managing networks in enterprise public, private, and hybrid cloud environments, preferably supporting large multi-subscription Microsoft Azure estates. Advanced hands-on experience with Microsoft Azure networking, including VNets, subnets, VNet peering, user-defined routes (UDRs), network security groups (NSGs), network interfaces, NAT, DNS, and cross-subscription connectivity. Strong knowledge of TCP/IP, UDP, ICMP, ARP, addressing, subnetting, CIDR, DNS, LDAP/LDAPS, Kerberos, RPC, routing, and return-path validation. Strong routing and switching expertise, including BGP, OSPF, EIGRP, MPLS, VLANs, STP, Layer 2/3 concepts, route propagation, path selection, redundancy, convergence, and failover. Hands-on experience designing, configuring, and troubleshooting Azure ExpressRoute connectivity, including BGP advertisements, learned routes, provider handoffs, scheduled maintenance, and customer/provider route exchange. Hands-on experience designing and troubleshooting site-to-site IPsec VPNs, including IKE/IPsec, tunnel interfaces, proxy IDs, BGP or static routing, and hybrid connectivity patterns. Advanced hands-on experience with Palo Alto Networks firewalls, including security policies, NAT and dynamic IP and port NAT, zones, interfaces, virtual routers, routing, VPN, URL filtering, logging, application connectivity, licensing, device certificates, and PAN-OS lifecycle management. Experience using centralized next-hop routing through virtual firewalls to inspect ingress, egress, inter-VNet, and cross-subscription traffic. Hands-on experience with Citrix NetScaler/ADC, including Gateway and load-balancing virtual servers, services and service groups, monitors, persistence, LDAP authentication, session, rewrite and responder policies, SSL profiles, certificates, and backend connectivity. Experience validating end-to-end application delivery across client access, Citrix Gateway/ADC, firewalls, StoreFront or application services, and backend systems. Strong network security knowledge, including firewall policy, IDS/IPS concepts, ACLs, PKI, SSL/TLS, certificate chains, cipher and protocol compatibility, URL filtering, vulnerability remediation, and security hardening. Advanced network performance and root-cause analysis skills using packet captures and diagnostic tools such as Wireshark, firewall captures, tcpdump, iperf, or SolarWinds; ability to analyze retransmissions, duplicate ACKs, zero-window conditions, resets, packet loss, MTU/MSS, TLS negotiation, session aging, and application-response delays. Experience troubleshooting business-critical and highly available applications, including cloud platform services, application integrations, SMB/application performance, syslog, telemetry, and monitoring paths. Experience supporting network monitoring, observability, and SIEM integrations, including troubleshooting logging loops, missing telemetry, and connectivity to platforms such as Microsoft Sentinel. Experience implementing and troubleshooting Active Directory integrations and one-way domain trusts, including DNS, LDAP/LDAPS, Kerberos, RPC, domain-controller reachability, routing, and firewall requirements. Experience working directly with customer IT teams, telecommunications carriers, exchange/service providers, and technology vendors to review requirements, coordinate changes, and resolve urgent connectivity issues. Ability to develop customer-specific connectivity and ACL documentation covering source and destination networks, ports, protocols, NAT, routing, certificates, identity, and application use cases. Experience creating and maintaining cloud and network architecture documentation, Microsoft Visio or Lucidchart diagrams, as-built documents, operating procedures, implementation notes, configuration templates, troubleshooting guides, upgrade-validation procedures, and change-validation or rollback steps. Experience reviewing vulnerability findings, assessing operational impact, defining remediation and rollout plans, and validating network software upgrades, patches, content updates, configuration changes, and policy updates. Strong incident, problem, and change management experience, including ticket handling, root-cause analysis, follow-up reporting, production troubles