Senior Associate AWS Cloud Network Engineer

Senior Associate AWS Cloud Network Engineer

LIVE

WHAT WE WILL DO

We are seeking a highly experienced SeniorAssociate AWS Cloud Network Engineer to join the Cloud Networking team and help design, implement, operate, and continuously improve a large-scale enterprise AWS network environment.

This role will be responsible for delivering secure, resilient, scalable, and highly available cloud-networking capabilities across a multi-account, multi-region AWS environment. The engineer will work across AWS networking, enterprise network integration, cloud security, DNS, routing, connectivity, and application enablement.

The successful candidate will bring strong hands-on experience with AWS networking and a solid foundation in enterprise networking technologies. This person must be comfortable troubleshooting complex end-to-end connectivity issues involving AWS, on-premises infrastructure, routing protocols, firewalls, DNS, and application dependencies.

The position will work closely with Cloud Platform, Enterprise Network, Cybersecurity/Network Security, Infrastructure, application engineering, and other technology teams.

Roles & Responsibilities:

• Cloud Network Architecture & Engineering
• Design, implement, and support AWS network architectures using Amazon VPC, shared VPC architectures, Transit Gateway, subnetting, route tables, VPC peering, PrivateLink, VPC endpoints, AWS Route53 and related AWS networking services.
• Implement secure and scalable multi-account and multi-region networking patterns.
• Develop and maintain cloud network standards, reusable architectures, and engineering patterns.
• Support network segmentation and controlled traffic flows across application, platform, shared-service, and security domains.
• Participate in architecture reviews and provide cloud-networking guidance for new applications and platform migrations.
• Hybrid Connectivity
• Design, implement, and troubleshoot connectivity between AWS and enterprise/on-premises environments.
• Work with AWS Direct Connect, Site-to-Site VPN, BGP, route propagation, routing domains, and hybrid connectivity patterns.
• Troubleshoot complex traffic paths across AWS, Direct Connect, enterprise routing, firewalls, and security controls.
• Partner with Enterprise Network teams on cloud/on-premises routing boundaries and connectivity changes.
• DNS & Network Services
• Implement and support Amazon Route 53, Route 53 Resolver, private hosted zones, inbound/outbound DNS resolution, and hybrid DNS architectures.
• Troubleshoot DNS resolution issues across AWS and enterprise environments.
• Support cloud network services such as VPC endpoints, PrivateLink, load balancing, and private API connectivity.
• Security Integration
• Implement cloud-networking solutions aligned with enterprise security requirements.
• Work with firewall and security teams to design and troubleshoot inspected traffic flows.
• Support network segmentation, security groups, NACLs, endpoint controls, and secure connectivity patterns.
• Ensure network designs follow enterprise security and least-privilege principles.
• Operations & Incident Management
• Provide senior-level troubleshooting for production incidents, service requests, and network onboarding activities.
• Participate in major incident response, root-cause analysis, problem management, and preventive engineering.
• Analyze routing, DNS, firewall, security group, endpoint, TCP/IP, and connectivity behavior to isolate network versus application/service issues.
• Support operational readiness, change management, documentation, and network lifecycle activities.
• Resilience, Capacity & Continuous Improvement
• Identify single points of failure and improve network resiliency and operational continuity.
• Contribute to capacity planning, growth forecasting, lifecycle management, and disaster-recovery/network recovery strategies.
• Help reduce key-person dependency through documentation, knowledge sharing, standardization, and team development.
• Continuously improve network reliability, observability, operational processes, and engineering practices.

WIN

WHAT WE EXPECT OF YOU

Basic Qualifications and Experience:

• Bachelor’s degree in computer science, Information Technology, Engineering, or a related technical discipline and 3+ years of relevant experience, or equivalent combination of education and experience.

Must-Have Skills:

• Strong hands-on experience designing and operating AWS networking infrastructure in enterprise environments.
• Significant experience with:
• AWS VPC
• Transit Gateway
• Route tables and routing
• Direct Connect and/or Site-to-Site VPN
• Route 53 and DNS
• VPC endpoints / PrivateLink
• Security Groups and Network ACLs
• Strong understanding of IPv4, TCP/IP, subnetting, CIDR, routing, DNS, and network troubleshooting.
• Experience with infrastructure automation using CloudFormation, Terraform, Python, Bash, or AWS CLI.
• Practical experience with enterprise routing technologies such as BGP and/or OSPF.
• Demonstrated experience troubleshooting complex hybrid-cloud connectivity issues.
• Experience working in environments with multiple teams, accounts, platforms, and organizational dependencies.
• Ability to participate in production support and critical incident response when required.

Good-to-Have Skills:

• AWS networking certification such as AWS Certified Advanced Networking – Specialty.
• Experience with AWS Organizations and large-scale multi-account environments.
• Experience with multi-region AWS networking.
• Experience integrating AWS networking with enterprise firewalls such as Fortinet, Palo Alto, or equivalent.
• Experience with cloud security architecture and network segmentation.
• Experience with centralized DNS and hybrid DNS architectures.
• Experience with infrastructure automation using CloudFormation, Terraform, Python, Bash, or AWS CLI.
• Experience with observability and network diagnostics including VPC Flow Logs, CloudWatch, packet captures, and network telemetry.
• Experience supporting regulated or highly controlled