Professional Cloud Network Engineer

A Professional Cloud Network Engineer implements and manages network architectures in Google Cloud. This individual may work on networking or cloud teams with architects who design cloud infrastructure. The Cloud Network Engineer uses the Google Cloud Console and/or command line interface, and leverages experience with network services, application and container networking, hybrid and multi-cloud connectivity, implementing VPCs, and security for established network architectures to ensure successful cloud implementations.

1. Designing, planning, and prototyping a Google Cloud network

• Designing the overall network architecture
• Designing a Virtual Private Cloud (VPC)
• Designing a hybrid network
• Designing a container IP addressing plan for Google Kubernetes Engine

2. Implementing a Google Cloud Virtual Private Cloud (VPC)

• Configuring VPCs. Considerations include
• Configuring routing
• Configuring and maintaining Google Kubernetes Engine clusters
• Configuring and managing firewall rules

3. Configuring network services

• Configuring load balancing
• Configuring Cloud CDN
• Configuring and maintaining Cloud DNS
• Enabling other network services

4. Implementing hybrid interconnectivity

• Configuring interconnect
• Configuring a site-to-site IPsec VPN (e.g., route-based, policy-based, dynamic or static routing)
• Configuring Cloud Router for reliability

5. Implementing network security

• Configuring identity and access management (IAM)
• Configuring Cloud Armor policies
• Configuring third-party device insertion into VPC using multi-nic (NGFW)
• Managing keys for SSH access

6. Managing and monitoring network operations

• Logging and monitoring with Stackdriver or Google Cloud Console
• Managing and maintaining security. Considerations include
• Maintaining and troubleshooting connectivity issues
• Monitoring, maintaining, and troubleshooting latency and traffic flow

7. Optimizing network resources

• Optimizing traffic flow
• Optimizing for cost and efficiency