Position Title: Senior Cloud Network Engineer
Sintra, Sintra, PT, 2639-002
Be a part of a revolutionary change - find your future in our future
At PMI, we’ve chosen to do something incredible. We’re transforming our business and building our future with one clear purpose – to deliver a smoke-free future. We're disrupting our company from the inside out. Our transformation is redefining every area of our business. From where and how we make and sell our products, to how we engage our consumers and society.
To support this vision, PMI is evolving into a science and technology-based, consumer-facing, multi-category company, and Information Technology (IT) is a vital partner in helping to lead the way. As we accelerate PMI's vision, we get to dream big too.
With unique and transformative IT projects matching all levels of skill and ambition, we've taken on the spirit of a start-up, with the freedom to craft and define our digital future, but with the support and scope of a vast global business
Role Overview
Join our team in PMI as a Senior Cloud Network Engineer, where you’ll lead the design and implementation of secure, scalable, and highly available cloud networking solutions across AWS and hybrid environments. This role is pivotal to evolving our Landing Zone architecture and integrating future-proof and secure network connectivity.
You’ll work at the intersection of network engineering, security, and automation, contributing to strategic initiatives that enhance compliance with PMI Infosec policies and support the modernization of our cloud footprint. Your expertise will directly influence how we build resilient, policy-driven network architectures that support mission-critical workloads.
Key Responsibilities
Architecture & Design
- Architect multi-region, multi-account AWS network topologies using VPCs, Transit Gateways, Cloud WAN, and Direct Connect.
- Design Secure Zero Trust hybrid connectivity between on-premises and cloud environments using VPN, eBGP, ECMP, and high-availability routing strategies.
- Define and enforce segmentation policies leveraging Cloud WAN segments, policy-based routing, and service insertion models.
- Lead the evolution of Landing Zones to support scalable onboarding, compliance, and operational excellence.
Security & Compliance
- Integrate Prisma Access (SPNs, CANs) for secure remote access, traffic inspection, and policy enforcement.
- Ensure all network designs and routing patterns comply with PMI Infosec policies, AWS Foundational Security Best Practices, and CIS benchmarks.
- Collaborate with InfoSec to isolate sensitive traffic, enforce least privilege access, and support zero-trust network principles.
Automation & Operations
- Automate network provisioning and configuration using Terraform, CloudFormation, and Python-based tooling.
- Monitor, analyze, and optimize network performance using CloudWatch and other monitoring tools
- Implement route filtering, prefix-list controls, and dynamic routing policies to prevent route leaks and ensure deterministic traffic flows.
Collaboration & Leadership
- Partner with platform, security, and application teams to align network architecture with business and compliance goals.
- Lead design reviews, provide technical mentorship, and contribute to knowledge-sharing across engineering teams.
- Influence roadmap planning for PMI Network initiatives such as secure access between different corporate networks, Onboarding of different VPC types, Cross-Region Traffic Flow and TGW upgrades.
Required Qualifications
- 6+ years of experience in cloud networking, with deep hands-on expertise in AWS.
- Proven experience with:
- AWS VPC, Transit Gateway, Cloud WAN, Route 53, Direct Connect
- Prisma Access (GlobalProtect, SPNs, CANs)
- Routing protocols: BGP, CMP
- Infrastructure as Code: Terraform, CloudFormation
- Security: AWS Network Firewall, WAF, IAM, VPN encryption standards
- Proficiency in Python for automation and tooling.
- Strong understanding of hybrid cloud models and segmentation strategies.
- Excellent communication skills in English, with the ability to articulate complex technical concepts to diverse audiences.
Preferred Qualifications
- Familiarity with TGW, Cloud WAN policy-based routing, and service insertion.
- Background in regulated environments with strong compliance requirements.
- Familiarity with Service mesh projects such as Istio and Linkerd
- Relevant certifications such as AWS Advanced Networking, Palo Alto Networks (PCNSE), or equivalent
Ultimately, personality means more to us than skills. If you have the passion and mindset, we’d urge you to apply: we will help you develop the skills.
WHY SHOULD YOU JOIN US?
At PMI IT, we believe success to be fuelled by our employees, depended on them coming to work every single day with a sense of purpose and an appetite for challenge. We are a people first organisation committed to empowering you to take risks, grow and explore. Here’s what sets us apart:
- We’re redefining the big picture of well-being and personal development. We seek the best professionals but recognize them as parents, caregivers, family, and community members. We look after each other and care for our people, so wherever you join us around the world, we’re committed to providing the type of benefits only a company like PMI can offer
- Being the fastest learning IT organization in the world is core to our culture, so we invest significantly in developing our people. From mentoring to technical certifications, stretch roles, soft skills development, and executive education, we help our people develop the skills they need to do their best work and create their own unique impact.
- At PMI IT, we believe diversity and inclusiveness are essential to every industry. We’re proud that our culture is built upon strong corporate values, a foundation of respect and belonging, and a commitment to diversity and inclusion that welcomes a variety of skill sets, backgrounds, and experiences.
- We see digital technology as disruptive, and possibilities as endless. Our teams work with innovative technologies such as Cloud, APIs, IoT and AI, supported by management practices and principles such as Agile, Design Thinking, and Product Management.
Every single IT member is part of our Transformation journey. Join us and pursue your ambitions – our staggering size and scale provides endless opportunities to progress. If our culture and mindset resonate with you, we look forward to receiving your application and getting to know you.
Together, let’s deliver a smoke-free future.
Things to know before you apply:
-
Relocation support is not available for this job.
-
To find out more about eligibility to apply for internal jobs, please refer to the Open Sourcing Employee Guidebook on the Internal Careers Portal.