Cloud Network Engineer

Reach Beyond

CHC provides unmatched helicopter services that enable our customers to reach beyond – to work in remote and challenging destinations that limit others – and come home safely. We are dedicated to our purpose of getting our customers where they need to be, when they need to be there, anywhere in the world – safely and reliably. All you have to do is get on board

At CHC, we pride ourselves on our values and culture:
Accountability: Take pride and ownership of our actions and results.
Collaboration: Working together with transparency and trust to drive continuous improvement.
Care: Creating a safe and sustainable environment for all.
Integrity: Doing what's right and fostering a culture of respect.
Excellence: Prioritizing quality services and setting industry standards.

Role Summary

The Cloud Network Engineer will be responsible for designing, implementing, and managing secure network infrastructure as our organization transitions from on-premises colocation facilities to Microsoft Azure during our comprehensive digital transformation. This role will ensure seamless connectivity between on-premises and cloud environments while maintaining the highest levels of security and performance for our global helicopter operations. The successful candidate will be a key technical contributor in establishing robust, scalable network architectures that support mission-critical aviation systems across hybrid cloud environments.

Cloud Network Engineer

Workplace: Remote - Poland

Type of employment: Employment Agreement

Key Responsibilities

• Hybrid Network Architecture: Design and implement comprehensive network architectures spanning on-premises colocation facilities and Microsoft Azure, ensuring optimal connectivity for helicopter operations and maintenance systems
• Azure Network Infrastructure: Build and manage Azure virtual networks, subnets, network security groups, application gateways, and load balancers to support cloud-native and migrated applications
• Cloud Connectivity Solutions: Implement and maintain Azure ExpressRoute, Site-to-Site VPN, and Point-to-Site VPN connections to ensure reliable, high-performance connectivity between on-premises and Azure environments
• Network Security Management: Configure and maintain Palo Alto Next Generation Firewalls for advanced threat protection, URL filtering, and application-aware security policies across hybrid environments
• Cisco Network Administration: Manage and optimize Cisco routing and switching infrastructure, including configuration, troubleshooting, and performance monitoring of network devices
• Network Monitoring & Optimization: Implement comprehensive network monitoring solutions using Azure Network Watcher, third-party tools, and custom dashboards to ensure optimal performance and proactive issue resolution
• Security Policy Implementation: Develop and enforce network security policies, access controls, and microsegmentation strategies to protect sensitive aviation data and operational systems
• Network Automation: Create automated network provisioning and configuration management solutions using Infrastructure as Code (IaC) and scripting to accelerate deployment processes
• Incident Response: Provide 24/7 network support, troubleshoot complex connectivity issues, and participate in incident response procedures for network-related outages
• Compliance & Documentation: Ensure network configurations comply with aviation industry regulations and maintain detailed network documentation, diagrams, and standard operating procedures
• Capacity Planning: Monitor network utilization, forecast capacity requirements, and plan infrastructure upgrades to support growing cloud adoption and helicopter fleet expansion
• Vendor Management: Collaborate with network vendors, ISPs, and cloud providers to resolve issues, implement new services, and optimize network performance

Qualifications, Skills & Attributes

Required Experience

• 6+ years of network engineering experience with hybrid cloud environments, including 3+ years with Azure networking services
• Extensive experience with Palo Alto Next Generation Firewalls, including configuration, management, and security policy implementation
• Strong background in Cisco networking technologies including routing protocols (BGP, OSPF, EIGRP), switching, and enterprise network design
• Proven experience managing network infrastructure during cloud migrations and digital transformation initiatives
• Hands-on experience with network monitoring, troubleshooting, and performance optimization in enterprise environments

Technical Expertise

• Azure Networking: Expert knowledge of Azure Virtual Networks, ExpressRoute, VPN Gateway, Application Gateway, Azure Firewall, and Network Security Groups
• Palo Alto Technologies: Proficiency with PAN-OS, Panorama management, GlobalProtect VPN, URL filtering, and threat prevention features
• Cisco Technologies: Advanced skills in Cisco IOS/NX-OS/Meraki, routing protocols, VLAN configuration, and network troubleshooting
• Network Protocols: Deep understanding of TCP/IP, DNS, DHCP, BGP, OSPF, MPLS, and QoS implementations
• Security Technologies: Experience with network segmentation, zero trust architectures, IDS/IPS, and network access control systems
• Monitoring Tools: Familiarity with network monitoring platforms, SIEM solutions, and Azure monitoring services

Specialized Knowledge

• Hybrid Cloud Networking: Understanding of cloud networking patterns, hub-and-spoke architectures, and multi-region connectivity
• Network Automation: Experience with Infrastructure as Code tools (Terraform, ARM templates), scripting (PowerShell, Python), and network automation frameworks
• Load Balancing: Knowledge of application delivery controllers, traffic distribution, and high availability designs
• SD-WAN Technologies: Familiarity with software-defined networking and SD-WAN implementations
• Performance Optimization: Skills in network performance analysis, bandwidth management, and latency optimization

Industry Understanding

• Knowledge of aviation industry network requirements and regulatory compliance (preferred)
• Understanding of aviation transportation industry networking challenges
• Experience with operational technology (OT) networks and industrial systems connectivity
• Familiarity with remote site connectivity for distributed operations

Certifications (Preferred)

• Cisco Certified Network Professional (CCNP) Enterprise or Security
• Palo Alto Networks Certified Network Security Engineer (PCNSE)
• Azure Solutions Architect Expert (AZ-305) or Azure Network Engineer Associate (AZ-700)

Attributes

• Technical Excellence: Strong analytical and problem-solving skills with attention to detail critical for network reliability
• Communication Skills: Ability to explain complex network concepts to both technical and non-technical stakeholders
• Project Management: Experience coordinating network projects, migrations, and infrastructure upgrades
• Adaptability: Flexibility to work in a rapidly evolving digital transformation environment
• Continuous Learning: Commitment to staying current with cloud networking technologies and security best practices
• Collaboration: Strong teamwork skills to work effectively with security, infrastructure, and application teams
• Reliability: Proven ability to maintain high availability for mission-critical networks supporting aviation operations
• Security Mindset: Strong focus on network security and proactive threat mitigation strategies

Location Requirements

• This is remote work position based anywhere in Poland working Monday through Friday
• Eligible to work in Poland (citizenship, permanent residency, or valid work visa)
• Available for after-hours support and emergency response as needed
• Willing to travel within Poland for remote site visits (typically 15-20% travel)

---