Cloud Network Engineer

Digital & Technology Team (D&T) is an integral division of HEINEKEN Global Business Services Poland. We are committed to making Heineken the most connected brewery. That includes digitalizing and integrating our processes, ensuring best-in-class technology, and embedding a data-driven culture. By joining us you will work in one of the most dynamic and innovative teams and have a direct impact on building the future of Heineken!

Would you like to meet the Team, see our office and much more? Visit our website: Heineken (heineken-dt.pl)

This role is part of HEINEKEN International’s Digital & Technology organisation and is based in the HEINEKEN Global Shared Services hub in Krakow. As part of the Global Connectivity team within the TechBase global portfolio, the Technology Specialist - Cloud Connectivity helps deliver the technology capabilities and connectivity foundations required to support HEINEKEN’s business ambition.

The Cloud Network Engineer role owns and evolves HEINEKEN’s cloud connectivity landscape, translating organisational and business needs into secure, resilient and scalable connectivity solutions between Azure, global WAN services, data centres, external partners and business applications. Working closely with the WAN Product Owner and relevant Enterprise and Domain Architects, the role ensures cloud connectivity designs align with enterprise architecture standards, roadmaps and business strategy.

The position provides technical leadership for cloud connectivity services across strategic initiatives and day-to-day operations, with a primary focus on Azure networking, cloud interconnects, virtual network security, hybrid connectivity and landing-zone connectivity. As a key component of the wider WAN architecture, cloud connectivity integrates with SD-WAN, Orange Evolution Platform, VPN Galerie and cloud network security services to improve data pathways while maintaining security, resilience and operational efficiency

Your responsibilities would include:

Architecture & Engineering

• Defininng and maintainannce of cloud connectivity standards, reference architectures and reusable design patterns
• Designing secure and resilient connectivity between Azure, data centres, SD-WAN and external partners
• Reviewing technical designs and assure alignment with enterprise architecture and security standards
• Supporting cloud transformation, data centre migrations and merger-and-acquisition initiatives
• Leading technical assessments, technology roadmaps and continuous improvement activities

Operations & Service Management

• Act as the technical escalation point for complex cloud connectivity incidents
• Troubleshoot routing, BGP, VPN, ExpressRoute, firewall, DNS and end-to-end connectivity issues
• Drive problem resolution, root-cause analysis and corrective actions
• Review and approve connectivity-related changes
• Ensure monitoring, observability, service acceptance and operational readiness

Security & Governance

• Design and maintain cloud network segmentation and secure connectivity patterns.
• Collaborate with Cyber Security on cloud networking controls, risk treatment and compliance.
• Support firewall integrations, private connectivity services and secure partner access.
• Maintain clear technical governance, design authority and architecture ownership

You are a good candidate if you have:

Essential requirements:

• Strong Azure networking experience and proven design of hybrid-cloud and enterprise connectivity solutions
• Deep knowledge of TCP/IP, BGP, IPSec VPN, routing, segmentation, DNS and network security
• Hands-on experience with ExpressRoute, private cloud connectivity, virtual network security and landing-zone connectivity
• Experience with incident, problem and change management in enterprise environments
• Ability to create architecture designs, technical standards and roadmaps
• Proven experience in a complex, international enterprise environment
• Strong analytical, problem-solving and decision-making capability
• Clear communication with technical teams, senior stakeholders and external providers
• Ability to balance strategic architecture with operational priorities and delivery outcomes.

Preferred skills & experience:

• Fortinet technologies, including FortiGate, FortiManager and FortiAnalyzer
• SD-WAN technologies and managed connectivity services
• Infrastructure as Code using Terraform or Bicep
• AWS networking fundamentals and experience working with telecom providers
• Azure Networking or Azure Solutions Architect certification
• Architect-level certification in Azure, AWS or GCP
• Knowledge of Aviatrix platform