Digital & Technology Team (D&T) is an integral division of HEINEKEN Global Business Services Poland. We are committed to making Heineken the most connected brewery by digitalising and integrating processes, enabling best-in-class technology and embedding a data-driven culture.
This role is part of HEINEKEN International’s Digital & Technology organisation and is based in the HEINEKEN Global Shared Services hub in Krakow. As part of the Global Connectivity team within the TechBase global portfolio, the Technology Specialist - Cloud Connectivity helps deliver the technology capabilities and connectivity foundations required to support HEINEKEN’s business ambition.
The Cloud Network Engineer owns and evolves HEINEKEN’s cloud connectivity landscape, translating organisational and business needs into secure, resilient and scalable connectivity solutions between Azure, global WAN services, data centres, external partners and business applications. The role works closely with the WAN Product Owner and relevant Enterprise and Domain Architects to ensure cloud connectivity designs align with enterprise architecture standards, roadmaps and business strategy.
The position provides technical leadership for cloud connectivity services across strategic initiatives and day-to-day operations, with a primary focus on Azure networking, cloud interconnects, virtual network security, hybrid connectivity and landing-zone connectivity. Cloud connectivity integrates with SD-WAN, Orange Evolution Platform, VPN Galerie and cloud network security services.
Responsibilities
- Define and maintain cloud connectivity standards, reference architectures and reusable design patterns.
- Design secure and resilient connectivity between Azure, data centres, SD-WAN and external partners.
- Review technical designs and assure alignment with enterprise architecture and security standards.
- Support cloud transformation, data centre migrations and merger-and-acquisition initiatives.
- Lead technical assessments, technology roadmaps and continuous improvement activities.
- Act as the technical escalation point for complex cloud connectivity incidents.
- Troubleshoot routing, BGP, VPN, ExpressRoute, firewall, DNS and end-to-end connectivity issues.
- Drive problem resolution, root-cause analysis and corrective actions.
- Review and approve connectivity-related changes.
- Ensure monitoring, observability, service acceptance and operational readiness.
- Design and maintain cloud network segmentation and secure connectivity patterns.
- Collaborate with Cyber Security on cloud networking controls, risk treatment and compliance.
- Support firewall integrations, private connectivity services and secure partner access.
- Maintain clear technical governance, design authority and architecture ownership.
Essential requirements
- Strong Azure networking experience and proven design of hybrid-cloud and enterprise connectivity solutions.
- Deep knowledge of TCP/IP, BGP, IPSec VPN, routing, segmentation, DNS and network security.
- Hands-on experience with ExpressRoute, private cloud connectivity, virtual network security and landing-zone connectivity.
- Experience with incident, problem and change management in enterprise environments.
- Ability to create architecture designs, technical standards and roadmaps.
- Proven experience in a complex, international enterprise environment.
- Strong analytical, problem-solving and decision-making capability.
- Clear communication with technical teams, senior stakeholders and external providers.
- Ability to balance strategic architecture with operational priorities and delivery outcomes.
Preferred skills and experience
- Fortinet technologies, including FortiGate, FortiManager and FortiAnalyzer.
- SD-WAN technologies and managed connectivity services.
- Infrastructure as Code using Terraform or Bicep.
- AWS networking fundamentals and experience working with telecom providers.
- Azure Networking or Azure Solutions Architect certification.
- Architect-level certification in Azure, AWS or GCP.
- Knowledge of the Aviatrix platform.