Cloud Network Engineer

Position Description Valiant Solutions is seeking a Cloud Network Engineer to join our rapidly growing and innovative cybersecurity team!   Valiant Solutions is seeking a Cloud Network Engineer to design, automate, and operate the multi-cloud networking layer connecting a federal agency's on-premise data centers to Oracle Cloud Infrastructure and Google Cloud Platform. The engineer builds and maintains dedicated hybrid connectivity, provisions every GCP network component through version-controlled Terraform, and extends the agency's IPv6 addressing plan into both cloud tenancies. This role supports an active migration of on-premise databases to OCI and of workloads, data, and support systems to GCP, with the bulk of regional migrations targeted for completion by December 2026. Cloud connectivity is held to 99.95 percent availability and must meet TIC 3.0 inspection and logging requirements. Named one of the Best Places to Work in the Washington DC area for 12 consecutive years , Valiant is proud of our employee-centric culture and commitment to excellence. If you are interested in learning more about Valiant and this opportunity, we invite you to apply now! This position is based in Silver Spring, MD, and allows for partial remote work. Remote work requires a high level of trust in our employees, and we strictly adhere to the details outlined in our Remote Work Policy below.  Required Experience 5 years of experience bridging traditional on-premises networking and cloud infrastructure. Bachelor's degree in Information Technology, Computer Science, or a related field. An Associate's degree plus two additional years of experience may substitute for the Bachelor's degree. Production experience with at least one of Oracle Cloud Infrastructure or Google Cloud Platform, and the ability to come up to speed quickly on the other. Experience supporting a live data center to cloud migration, not only greenfield cloud build-out. OCI networking: FastConnect, VCN design, CIDR planning, route tables, Security Lists, and Network Security Groups. GCP networking: Cloud Interconnect, HA VPN, Global VPC, Shared VPC, VPC peering, Private Service Connect, and cloud load balancing. Terraform as the authoritative provisioning mechanism, including module design, state management, and version control workflow. BGP design and traffic engineering across hybrid and inter-cloud paths. Dual-stack IPv6 deployment in cloud environments, including addressing and routing. On-premise routing and switching fundamentals sufficient to troubleshoot a hybrid path end to end. Scripting for network automation, for example Python, and familiarity with automated documentation generation. Clear technical writing for Methods of Procedure, topology diagrams, standard operating procedures, and monthly status report inputs.  Working knowledge of federal network security direction, including Zero Trust Architecture (NIST SP 800-207), Trusted Internet Connection (TIC) 3.0 reference architectures, and the IPv6 mandate under OMB M-21-07. Familiarity with NIST SP 800-53 Rev. 5 security and privacy controls as they apply to network and boundary protection.  Understanding of HSPD-12 identity credentialing and its enforcement in network access decisions.  Awareness of Section 508 accessibility requirements (WCAG 2.0 AA) as they apply to contract deliverables.  Experience operating inside a federal change control process, with government-approved documentation and deliverable acceptance criteria.  Written and verbal communication skills sufficient to explain network and security concepts to both engineers and non-technical government stakeholders. Ability to brief senior government leadership, including the Contracting Officer's Representative and Technical Lead, on incident root cause, risk, and remediation. Willingness to complete required customer training, including annual cybersecurity awareness, records management, privacy, safety, and harassment prevention training.  Preferred Certifications GCP Professional Cloud Network Engineer. OCI Specialist certifications relevant to cloud networking. HashiCorp Certified: Terraform Associate CCNP Enterprise  Responsibilities Oracle Cloud Infrastructure  Manage the dual FastConnect virtual circuits terminating at the Ashburn data center, including BGP peering session configuration, maintenance, and bandwidth capacity planning. Design and administer Virtual Cloud Networks, covering CIDR block allocation, subnets, route tables, Security Lists, and Network Security Groups. Support the migration of on-premise Oracle databases and related resources into OCI, confirming network readiness ahead of each cutover. Automate repeatable migration, validation, and documentation procedures so that network records stay accurate and auditable. Google Cloud Platform and Infrastructure as Code Manage Cloud Interconnect for high-throughput workloads and HA VPN for redundant backup paths. Engineer Global VPCs, Shared VPC host and service project configurations, and VPC peering relationships. Define, version control, and deploy every GCP network component through Terraform, including VPCs, firewall rules, Private Service Connect configurations, and load balancers. Maintain the Terraform code base using the customer's native GCP tooling, including Google Cloud Secure Source Manager. Provide hybrid connectivity support for workload, data, and support system migrations from on-premise infrastructure to GCP. Multi-Cloud Routing, Security, and IPv6  Engineer secure inter-cloud connectivity where an application in one cloud depends on a data service in the other, applying BGP traffic engineering to prevent suboptimal paths. Confirm that all cloud traffic is inspected and logged in line with TIC 3.0 reference architectures. Convert OCI and GCP environments from IPv4-only to IPv6 dual-stack, and confirm that cloud resources and re