AWS Network Engineer Hybrid Connectivity & Automation
About The Position
Our client, a 3rd-generation management consulting firm, is working on a project for their client - a global financial institution operating in a highly regulated environment and investing in modern cloud governance to strengthen security, compliance, and enterprise risk visibility across AWS and Azure. They are now looking to add to their team and are hiring an "AWS Network Engineer – Hybrid Connectivity & Automation”. This role will be 100% remote. Our Client, is modernizing its migration pathways from on‐prem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka → MSK, object storage → S3, and future database replication. This is not a Kafka/storage engineering role — it is AWS networking + automation, creating reusable CDK "Lego blocks” that will eventually be consumed by AI‐driven or self‐service migration tooling.
Requirements
- Hands‐on expertise with AWS VPC Lattice (Resource Configs, Resource Gateway, Service Networks, Service Network VPC Endpoints)
- Strong experience with AWS Cloud WAN (Segments, route filtering, advanced routing, TGW peering patterns)
- Deep knowledge of AWS Direct Connect (VIF automation, VGW direct attach, DX Gateway patterns, 100G dedicated circuits)
- Expertise with AWS PrivateLink (Interface endpoints at scale, Endpoint policies using org‐level condition keys)
- Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)
- Experience designing IAM data perimeter boundaries
- Strong IaC automation using CDK (Python), CloudFormation, Lambda
- Hybrid networking experience (on‐prem ↔ AWS)
Nice To Haves
- Knowledge of Kafka/MSK, S3, or database replication flows
- Experience in large enterprise networking
- Prior work on migration tooling or hybrid data movement
Responsibilities
- Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink
- Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda
- Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads
- Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)
- Design IAM data perimeter controls to replace traditional firewall rules
- Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automation‐friendly
- Support connectivity across DX on‐ramps, Cloud WAN segments, and customer‐managed VPCs
- Ensure secure, compliant, TLS‐encrypted traffic flows between on‐prem and AWS
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
