Sr. Cloud Network Engineer

JLL empowers you to shape a brighter way

Our people at JLL are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented peopleand empowering them to thrive, grow meaningful careers and to find a place where they belong. Whether you’ve got deep experience in commercial real estate, skilled trades or technology, or you’re looking to apply your relevant experience to a new industry, join our team as we help shape a brighter way forward.

JLL is seeking an experienced Senior Cloud Network Engineer to design, build, secure, and operate enterprise network services across Microsoft Azure, Amazon Web Services, and Google Cloud Platform. Azure is the primary focus of this role, with responsibility for supporting standardized connectivity and network architecture across JLL’s broader multi-cloud environment.

The ideal candidate brings deep Azure networking expertise together with strong hands‑on AWS and GCP skills, enterprise networking fundamentals, infrastructure automation experience, and a security‑first mindset. This individual will collaborate with cloud platform, cybersecurity, architecture, application, and operations teams to deliver scalable, resilient, and consistent multi‑cloud network solutions.

• Design and implement scalable Azure network architectures using Virtual Networks, subnets, route tables, Network Security Groups, Azure Virtual WAN, Virtual Network Manager, NAT Gateway, Private Link, and Azure DNS.
• Design and operate AWS network architectures using VPCs, subnets, route tables, Transit Gateway, Cloud WAN, Direct Connect, Site‑to‑Site VPN, PrivateLink, Route 53, and Network Firewall.
• Design and support GCP network services using Shared VPC, Network Connectivity Center, Cloud Router, Cloud Interconnect, HA VPN, Private Service Connect, Cloud NAT, Cloud DNS, and hierarchical firewall policies.
• Build regional and multi‑region architectures that meet availability, performance, security, and disaster‑recovery requirements.
• Engineer connectivity among Azure, AWS, GCP, enterprise data centers, branch locations, and strategic technology partners using ExpressRoute, Direct Connect, Cloud Interconnect, VPN, and software‑defined networking services.
• Support Azure, AWS, and GCP landing zones and establish standardized network patterns for new subscriptions, accounts, projects, applications, and business units.
• Review application onboarding requirements and recommend appropriate connectivity, segmentation, DNS, load‑balancing, and security designs.

• Design and maintain Azure Firewall policies, AWS Network Firewall policies, GCP hierarchical firewall policies, security groups, network ACLs, microsegmentation controls, ingress and egress policies, and secure routing standards.
• Integrate cloud‑native networking with enterprise security platforms, including Palo Alto Networks Cloud NGFW and VM‑Series, secure web gateways, and zero‑trust services.
• Support internal and external load‑balancing solutions, including integration with web application firewalls and application‑delivery services.
• Partner with cybersecurity teams to implement network security controls aligned with zero‑trust principles and JLL security standards.
• Assist with vulnerability remediation, audit requests, compliance assessments, and implementation of required security controls.

• Develop and maintain reusable Terraform modules for Azure, AWS, and GCP network services and connectivity patterns.
• Automate network provisioning, configuration validation, compliance checks, and operational workflows.
• Integrate infrastructure code with Git‑based version control and CI/CD pipelines.
• Implement policy‑as‑code and configuration standards to reduce manual changes and prevent network drift.
• Produce clear technical documentation, network diagrams, configuration standards, and operational runbooks.

• Monitor the health, performance, utilization, and availability of Azure, AWS, and GCP network services.
• Troubleshoot complex routing, BGP, DNS, firewall, latency, packet‑loss, and application‑connectivity issues.
• Use Azure Network Watcher and Connection Monitor, AWS Reachability Analyzer and VPC Flow Logs, GCP Network Intelligence Center and Connectivity Tests, packet captures, and related observability tools.
• Lead root‑cause analysis for major incidents and develop corrective and preventive actions.
• Participate in change management, capacity planning, lifecycle manageme