Sr. Cloud Network Engineer

JLL empowers you to shape a brighter way . Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people and empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward. Position Overview JLL is seeking an experienced Senior Cloud Network Engineer to design, build, secure, and operate enterprise network services across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Azure is the primary focus of this role, with responsibility for supporting standardized connectivity and network architecture across JLL’s broader multi-cloud environment. The ideal candidate brings deep Azure networking expertise together with strong hands-on AWS and GCP skills, enterprise networking fundamentals, infrastructure automation experience, and a security-first mindset. This individual will collaborate with cloud platform, cybersecurity, architecture, application, and operations teams to deliver scalable, resilient, and consistent multi-cloud network solutions. Key Responsibilities Azure-Led Multi-Cloud Network Architecture and Engineering · Design and implement scalable Azure network architectures using Virtual Networks, subnets, route tables, Network Security Groups, Azure Virtual WAN, Virtual Network Manager, NAT Gateway, Private Link, and Azure DNS. · Design and operate AWS network architectures using VPCs, subnets, route tables, Transit Gateway, Cloud WAN, Direct Connect, Site-to-Site VPN, PrivateLink, Route 53, and Network Firewall. · Design and support GCP network services using Shared VPC, Network Connectivity Center, Cloud Router, Cloud Interconnect, HA VPN, Private Service Connect, Cloud NAT, Cloud DNS, and hierarchical firewall policies. · Build regional and multi-region architectures that meet availability, performance, security, and disaster-recovery requirements. · Engineer connectivity among Azure, AWS, GCP, enterprise data centers, branch locations, and strategic technology partners using ExpressRoute, Direct Connect, Cloud Interconnect, VPN, and software-defined networking services. · Support Azure, AWS, and GCP landing zones and establish standardized network patterns for new subscriptions, accounts, projects, applications, and business units. · Review application onboarding requirements and recommend appropriate connectivity, segmentation, DNS, load-balancing, and security designs. Network Security · Design and maintain Azure Firewall policies, AWS Network Firewall policies, GCP hierarchical firewall policies, security groups, network ACLs, microsegmentation controls, ingress and egress policies, and secure routing standards. · Integrate cloud-native networking with enterprise security platforms, including Palo Alto Networks Cloud NGFW and VM-Series, secure web gateways, and zero-trust services. · Support internal and external load-balancing solutions, including integration with web application firewalls and application-delivery services. · Partner with cybersecurity teams to implement network security controls aligned with zero-trust principles and JLL security standards. · Assist with vulnerability remediation, audit requests, compliance assessments, and implementation of required security controls. Automation and Infrastructure as Code · Develop and maintain reusable Terraform modules for Azure, AWS, and GCP network services and connectivity patterns. · Automate network provisioning, configuration validation, compliance checks, and operational workflows. · Integrate infrastructure code with Git-based version control and CI/CD pipelines. · Implement policy-as-code and configuration standards to reduce manual changes and prevent network drift. · Produce clear technical documentation, network diagrams, configuration standards, and operational runbooks. Operations and Reliability · Monitor the health, performance, utilization, and availability of Azure, AWS, and GCP network services. · Troubleshoot complex routing, BGP, DNS, firewall, latency, packet-loss, and application-connectivity issues. · Use Azure Network Watcher and Connection Monitor, AWS Reachability Analyzer and VPC Flow Logs, GCP Network Intelligence Center and Connectivity Tests, packet captures, and related observability tools. · Lead root-cause analysis for major incidents and develop corrective and preventive actions. · Participate in change management, capacity planning, lifecycle management, and disaster-recovery testing. · Provide technical leadership during high-severity incidents and participate in an on-call rotation when required. · Identify opportunities to improve network resilience, operational efficiency, security, and cost optimization. Technical Leadership and Collaboration · Serve as the subject-matter expert for Azure networking while providing senior-level engineering support for AWS, GCP, multi-cloud architecture, and hybrid-cloud connectivity. · Collaborate with global network engineering, cloud platform, cybersecurity, enterprise architecture, application, and service-management teams. · Provide design reviews, technical guidance, and mentoring to engineers and operational support teams. · Work with Microsoft, AWS, Google Cloud, telecommunications carriers, managed-service providers, and technology vendors to resolve technical issues and deliver new capabilities. · Help establish engineering standards, reference architectures, governance controls, and cloud network operating procedures. · Support knowledge transfer and the transition of repeatable operational activities to managed-service and support teams. Required Qualifications · Bachelor’s degree in computer science, information technology, engineering, or a related discipline, or equivalent professional experience. · Seven or more years of enterprise network engineering experience, including at least three years of hands-on Azure networking experience and demonstrated AWS and GCP networking experience. · Advanced Azure networking knowledge, including Virtual WAN, Virtual Network Manager, ExpressRoute, VPN Gateway, Azure Route Server, Private Link, Load Balancer, Application Gateway, Azure Firewall, Network Watcher, and Azure DNS. · Advanced AWS networking knowledge, including VPC, Transit Gateway, Cloud WAN, Direct Connect, Site-to-Site VPN, PrivateLink, Elastic Load Balancing, Route 53, Network Firewall, Reachability Analyzer, and VPC Flow Logs. · Strong GCP networking knowledge, including Shared VPC, Network Connectivity Center, Cloud Router, Cloud Interconnect, HA VPN, Private Service Connect, Cloud NAT, Cloud Load Balancing, Cloud DNS, and VPC Flow Logs. · Strong understanding of TCP/IP, IPv4 and IPv6, BGP, DNS, NAT, VPNs, routing, segmentation, high availability, and network security. · Experience designing connectivity between public cloud platforms and enterprise data centers. · Hands-on experience with Terraform and Git-based infrastructure-development practices. · Experience troubleshooting complex network and application-connectivity issues in large enterprise environments. · Strong documentation, communication, problem-solving, and stakeholder-management skills. · Ability to work effectively across globally distributed teams and manage multiple priorities. Preferred Qualifications · Microsoft Certified: Azure Network Engineer Associate or Azure Solutions Architect Expert; AWS Certified Advanced Networking – Specialty and Google Cloud Professional Cloud Network Engineer are also valued. · Cisco CCNP, Palo Alto Networks PCNSE, HashiCorp Terraform Associate, or comparable industry certification. · Experience with Palo Alto Networks cloud security solutions, Cloud NGFW, or VM-Series firewalls. · Experience with Azure Virtual WAN, AWS Transit Gateway or Cloud WAN, GCP Network Connectivity Center, ExpressRoute, Direct Connect, Cloud Interconnect, and multi-cloud routing architectures. · Experience with software-defined WAN, secure access service edge, zero-trust networking, and cloud-based security services. · Familiarity with Python, Go, PowerShell, or another automation language. · Experience with GitHub Actions, GitLab CI, Azure DevOps, Jenkins, or similar CI/CD platforms. · Knowledge of ServiceNow, ITIL processes, Agile delivery practices, and enterprise change management. · Experience supporting a large, globally distributed organization with complex regulatory, security, and availability requirements. Success Measures – First 12 Months · Establish secure, scalable, and repeatable Azure-led network architecture patterns across Azure, AWS, and GCP. · Improve the resilience and operational visibility of Azure, AWS, GCP, and hybrid-cloud connectivity. · Increase infrastructure-as-code adoption and reduce manual network configuration. · Strengthen routing, segmentation, firewall, and governance standards. · Reduce recurring network incidents through automation, monitoring, and root-cause remediation. · Improve technical documentation and knowledge transfer across engineering and support teams. · Deliver assigned cloud-network initiatives within agreed scope, schedule, security, and availability requirements. Location: On-site –Mexico,MEX If this job description resonates with you, we encourage you to apply even if you don’t meet all of the requirements. We’re interested in getting to know you and what you bring to the table! At JLL, we harness the power of artificial intelligence (AI) to efficiently accelerate meaningful connections between candidates and opportunities. Using AI capabilities, we analyze your application for relevant skills, experiences, and qualifications to generate valuable insights about how your unique profile aligns with the specific requirements of the role you're pursuing. JLL Privacy Notice Jones Lang LaSalle (JLL), together with its subsidiaries and affiliates, is a leading global provider of real estate and investment management services. We take our responsibility to protect the personal information provided to us seriously. Generally the personal information we collect from you are for the purposes of processing in connection with JLL’s recruitment process. We endeavour to keep your personal information secure with appropriate level of security and keep for as long as we need it for legitimate business or legal reasons. We will then delete it safely and securely. For more information about how JLL processes your personal data, please view our Candidate Privacy Statement . For additional details please see our career site pages for each country. Jones Lang LaSalle (“JLL”) is an Equal Opportunity Employer and is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process – including the online application and/or overall selection process – you may email us at . This email is only to request an accommodation. Please direct any other general recruiting inquiries to our Contact Us page > I want to work for JLL. Jones Lang LaSalle ("JLL") está comprometida a trabajar con personas con discapacidades y proporcionarles accesibilidad. Si necesita un ajuste razonable para cualquier parte del proceso de empleo – incluyendo la candidatura en línea y/o el proceso general de selección – puede enviarnos un correo electrónico a . Este correo electrónico es solo para solicitar un ajuste razonable. Por favor, dirija cualquier otra consulta general de reclutamiento a nuestra página Contáctanos > Quiero trabajar para JLL.