AWS Infra Architect

Job Title:

Role Summary

secure, high-performance cloud networks

Key Responsibilities

1. End-to-End Network Architecture:

• Design & implement scalable AWS networking solutions:

  VPCs, Transit Gateway (TGW), VPN, Direct Connect, Route 53, Security Groups, NACLs, and WAF

  .
• Architect

  site-to-site VPNs

  , Direct Connect circuits, and BGP routing for hybrid cloud environments.
• Optimize network performance, latency, and cost across multi-region/multi-account setups.

2. Connectivity & Integration:

• Establish secure connectivity between AWS, on-prem data centers, colocations, and 3rd-party clouds (e.g., Azure/GCP).
• Implement

  network segmentation, VPC peering, TGW attachments, and PrivateLink

  for microservices.
• Automate VPN tunnel failover and disaster recovery workflows.

3. Workload Deployment & Security:

• Deploy and manage workloads within AWS networks (EC2, EKS, ECS, RDS, Lambda) with

  network-first security

  (zero-trust principles).
• Enforce compliance via

  network-level controls

  (e.g., TLS termination, DDoS protection, IDS/IPS).
• Integrate networking with

  CI/CD pipelines

  (e.g., Terraform, CloudFormation).

4. Operational Excellence:

• Monitor network health using

  CloudWatch, VPC Flow Logs, and AWS Network Manager

  .
• Troubleshoot complex network issues (BGP, VPN drops, latency spikes).
• Conduct capacity planning and cost optimization for network resources.

5. Leadership & Collaboration:

• Mentor SRE/cloud teams on networking best practices.
• Partner with security/compliance teams to implement

  network governance frameworks

  .
• Document architectures, runbooks, and disaster recovery procedures.

Required Qualifications

• 7+ years

  in cloud infrastructure roles, with

  5+ years focused on AWS networking

  .

• Proven expertise

  in:

• AWS Networking Services:

  VPC, TGW, Direct Connect, VPN, CloudFront, Route 53, Network Firewall.

• Hybrid Connectivity:

  Site-to-site VPN, BGP, IPSec, and SD-WAN integration.

• Infrastructure-as-Code (IaC):

  Terraform, CloudFormation, or CDK.
• Deep knowledge of

  TCP/IP, DNS, DHCP, routing protocols, and network security

  .
• Experience with

  container networking

  (EKS, ECS) and

  serverless architectures

  .

Preferred Skills

• Familiarity with

  multi-cloud networking

  (Azure ExpressRoute, Google Cloud Interconnect).
• Scripting (Python, Bash) for network automation.
• Knowledge of

  SRE principles

  (SLIs/SLOs, error budgets).
• Experience with

  network observability tools.