Principal Network Engineer - AWS Sysops Administrator

Job Description:

Role : Principal Network Engineer

Mode: Hybrid (2 days a week)

Work Timings: 2:00 PM to 11:00 PM IST

Location:

• Salarpuria Sattva Eminence, Ground Floor, No.239, SY No. 174/175 & 176 Outer Ring Road, Marathahalli, Karnataka, Bengaluru 560037

OR

• Smartworks 3B, 5th Floor, Raheja Mindspace TSIIC Software Layout Hitech City, Hyderabad 500081 Telangana, India

Roles and Responsibilities

1. AWS Platform Governance and Account Management

• Lead the design, deployment, and management of AWS Control Tower and Landing Zones to establish a secure, scalable, and governed multi-account architecture.


• Implement and maintain AWS Organizations and Service Control Policies (SCPs) to ensure effective account governance and compliance.

2. Cloud Networking and Connectivity

• Design and support foundational cloud networking components such as Virtual Private Clouds (VPCs), Transit Gateways (TGW), AWS CloudWAN, VPN connections, Direct Connect, and Load Balancers to ensure secure and high-performance connectivity across hybrid environments.

3. Automation and Event-Driven Architecture

• Develop and manage event-driven automation workflows leveraging AWS Lambda and Python for tasks including infrastructure orchestration, patching, and cloud-native process automation.


• Utilize Boto3 SDK for scripting AWS resource automation and integration.

4. System and Cloud Administration

• Perform Linux-based system administration tasks, including performance monitoring, system hardening, and configuration management.


• Manage Amazon Machine Image (AMI) lifecycle and automate patch management and software updates using AWS Systems Manager (SSM).

5. Cloud Services Operations

• Provision, configure, and maintain key AWS services including Amazon RDS, DynamoDB, Route 53, AWS CloudFront, AWS Resource Access Manager (RAM), and AWS Service Catalog.


• Ensure reliable and efficient operations of application infrastructure hosted on AWS.

6. Identity and Access Management

• Configure and maintain IAM roles, policies, and permissions in line with the principle of least privilege.


• Administer and integrate AWS Single Sign-On (SSO) and Okta for federated identity management and role-based access control.

7. Cloud Security and Compliance

• Monitor and enhance cloud security posture using AWS Security Hub, AWS Config, and AWS Web Application Firewall (WAF).


• Align infrastructure configurations with established security standards such as AWS Foundational Security Best Practices, CIS Benchmarks, and NIST frameworks.

8. CI/CD and Infrastructure as Code

• Design and implement GitOps-based CI/CD workflows using tools like Terraform, AWS CloudFormation, and Python-based scripts.


• Contribute to infrastructure automation and version control practices to support scalable and repeatable deployments.

9. Cloud Migration and Provisioning

• Support and execute AWS migration initiatives using AWS Migration Hub and AWS Database Migration Service (DMS).


• Manage AWS Account Factory to streamline and standardize the provisioning of new AWS accounts as part of cloud adoption strategies.

10. Workflow Automation and Orchestration

• Utilize AWS Step Functions to orchestrate complex workflows and integrate with various AWS services for seamless process automation.


• Develop automation for JIRA workflows and task tracking using APIs and scripting.

Mandatory Skills

AWS control tower & landing zones

Organizations & SCPs

Good to have skills

Knowledge on Palo alto firewalls

Hands on coding skills - Python/CDK/Pulumi

Certifications

Any one of the below:

AWS Certified Solutions Architect Associate