Philip Morris International

Philip Morris International is recruiting a Senior Cloud Network Engineer 

Be a part of a revolutionary change
At PMI, they have chosen to do something incredible. They are transforming our business and building their future on smoke-free products. With huge change comes great opportunity. Wherever you join them, you'll enjoy the freedom to dream up and deliver better, brighter solutions—and the space to move your career forward in countless directions. To support this vision, PMI is evolving into a science and technology-based, consumer-facing, multi-category company, and Information Technology (IT) is a vital partner in helping to lead the way. As they accelerate PMI's vision, they get to dream big too. With unique and transformative IT projects matching all levels of skill and ambition, they've taken on the spirit of a start-up, with the freedom to craft and define our digital future, but with the support and scope of a vast global business
 
Your 'day to day'
Join their team in PMI as a Senior Cloud Network Engineer, where you'll lead the design and implementation of secure, scalable, and highly available cloud networking solutions across AWS and hybrid environments. This role is pivotal to evolving their Landing Zone architecture and integrating future-proof and secure network connectivity. You'll work at the intersection of network engineering, security, and automation, contributing to strategic initiatives that enhance compliance with PMI Infosec policies and support the modernization of their cloud footprint. Your expertise will directly influence how they build resilient, policy-driven network architectures that support mission-critical workloads.

Key Responsibilities
Architecture & Design

Architect multi-region, multi-account AWS network topologies using VPCs, Transit Gateways, Cloud WAN, and Direct Connect.Design Secure Zero Trust hybrid connectivity between on-premises and cloud environments using VPN, eBGP, ECMP, and high-availability routing strategies.Define and enforce segmentation policies leveraging Cloud WAN segments, policy-based routing, and service insertion models.Lead the evolution of Landing Zones to support scalable onboarding, compliance, and operational excellence. Security & Compliance

Integrate Prisma Access (SPNs, CANs) for secure remote access, traffic inspection, and policy enforcement.Ensure all network designs and routing patterns comply with PMI Infosec policies, AWS Foundational Security Best Practices, and CIS benchmarks.Collaborate with InfoSec to isolate sensitive traffic, enforce least privilege access, and support zero-trust network principles. Automation & Operations 

Automate network provisioning and configuration using Terraform, CloudFormation, and Python-based tooling.Monitor, analyze, and optimize network performance using CloudWatch and other monitoring tools.Implement route filtering, prefix-list controls, and dynamic routing policies to prevent route leaks and ensure deterministic traffic flows. Collaboration & Leadership 

Partner with platform, security, and application teams to align network architecture with business and compliance goals.Lead design reviews, provide technical mentorship, and contribute to knowledge-sharing across engineering teams.Influence roadmap planning for PMI Network initiatives such as secure access between different corporate networks, Onboarding of different VPC types, Cross-Region Traffic Flow and TGW upgrades.

Job Requiriments:

6+ years of experience in cloud networking, with deep hands-on expertise in AWS.Proven experience with:

AWS VPC, Transit Gateway, Cloud WAN, Route 53, Direct Connect Prisma Access (GlobalProtect, SPNs, CANs) Routing protocols: BGP, CMP Infrastructure as Code: Terraform, CloudFormation Security: AWS Network Firewall, WAF, IAM, VPN encryption standardsProficiency in Python for automation and tooling.Strong understanding of hybrid cloud models and segmentation strategies. Excellent communication skills in English, with the ability to articulate complex technical concepts to diverse audiences.  Nice to Have:

Familiarity with TGW, Cloud WAN policy-based routing, and service insertion.Background in regulated environments with strong compliance requirements.Familiarity with Service mesh projects such as Istio and Linkerd Relevant certifications such as AWS Advanced Networking, Palo Alto Networks (PCNSE), or equivalent
 
What they offer:

• Work-life balance: Smart working options and a supportive office environment.
• Learning & Development: A robust ecosystem to grow your technical and soft skills.
• Inclusion & Diversity: We embrace differences as a source of innovation and strength.
  
  

Want to know more? Get in touch with us

---