AWS Cloud Networking and Security Engineer

Role & responsibilities

• Network Design & Implementation:

  Design and implement scalable and secure network architectures in AWS and Azure environments. Ensure integration with existing on-premises networks and cloud services.

• Configuration & Management:

  Configure and manage virtual networks, subnets, VPNs, load balancers, and firewall rules within AWS and Azure. Implement network segmentation and security controls to protect data and applications.

• Performance Optimization:

  Monitor network performance and troubleshoot issues to maintain high availability and reliability. Optimize network configurations to enhance performance and reduce latency.

• Security & Compliance:

  Implement and manage security policies and practices to protect cloud-based network resources. Ensure compliance with industry standards and company policies.

• Automation & Scripting:

  Develop and maintain automation scripts using tools like Terraform, AWS CloudFormation, or Azure Resource Manager to streamline network provisioning and management tasks.

• Collaboration:

  Work closely with operations teams, application developers, and system administrators to support and troubleshoot network-related issues. Provide guidance on best practices for cloud network architecture and operations.

• Documentation & Reporting:

  Create and maintain detailed documentation for network configurations, processes, and procedures. Generate reports on network performance, incidents, and resolutions.

• Tier 3 Support -

  when our CDK operational teams get stuck with a cloud networking issues, you will be the point of escalation.

Qualifications:

• Education:

  Bachelors degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent work experience.

• Experience:

  Minimum of 6+ years of experience in network engineering with a focus on cloud environments (AWS and Azure).

• Certifications:

  Relevant certifications such as AWS Certified Solutions Architect, AWS Certified Advanced Networking, AWS or Microsoft Security Specialization, Microsoft Certified: Azure Network Engineer Associate, or similar are highly desirable.

Preferred candidate profile

• This is a hands-on role. You will be the subject matter expert at CDK for all things AWS networking and security.
• Strong understanding and hands-on use of cloud networking capabilities and services (ex. Routing, VPC’s, Transit Gateways, VPN’s, Direct Connect, Azure Virtual Network, ExpressRoute).
• Proficiency in network protocols, services and tools (ex. TCP/IP, BGP, DNS, DHCP, HTTP/HTTPS, IPAM, New Relic, etc.).
• Experience with network monitoring (New Relic, CloudWatch) and diagnostic tools. Extensive use of Cloud Watch and log files for forensics and operational remediations.
• Knowledge of network security practices and tools (CSPM tools, firewalls, IDS/IPS, encryption). Deep experience with network design within a public cloud environment with a strong focus on perimeter security.
• Familiarity with automation tools and frameworks (Terraform, AWS CloudFormation, Ansible, Puppet, etc.).
• Excellent problem-solving skills and the ability to troubleshoot complex network issues.
• Strong communication skills with the ability to work collaboratively in a team environment.
• Experience with AWS and Azure Native services like AWS Config, Cloud Watch, Cloud Trail, Route53, Guard Duty, Detective, Inspector, Security Hub, Secrets Server, KMS, AWS Shield, Security Groups, etc.
• Experience with 3rd party tools like Rapid7, Prisma Cloud (CSPM), Wiz, Delinea, etc.
• Experience writing scripts using AWS API to pull data and/or automation cloud admin/governance functions.