AWS Cloud

The Cloud Network & Security Engineer is a pivotal role in the IT organization, responsible for architecting, implementing, and maintaining complex cloud environments that support the company's critical applications and services.    As a Cloud Engineer, you will have be responsible for designing, implementing, and managing network infrastructure within AWS (primary) and Azure (secondary) public cloud environments including on-prem DC to cloud connectivity, multi-cloud connectivity and intra-cloud connectivity. Your expertise will be pivotal in ensuring the reliability, scalability, and security of our cloud-based networks. You will work closely with cross-functional teams to optimize cloud network performance and troubleshoot complex issues.  You will also have a strong focus in cloud security focusing both on Cloud Platform and network/perimeter security.

Key Responsibilities:

• Network Design & Implementation: Design and implement scalable and secure network architectures in AWS and Azure environments. Ensure integration with existing on-premises networks and cloud services.
• Configuration & Management: Configure and manage virtual networks, subnets, VPNs, load balancers, and firewall rules within AWS and Azure. Implement network segmentation and security controls to protect data and applications.
• Performance Optimization: Monitor network performance and troubleshoot issues to maintain high availability and reliability. Optimize network configurations to enhance performance and reduce latency.
• Security & Compliance: Implement and manage security policies and practices to protect cloud-based network resources. Ensure compliance with industry standards and company policies.
• Automation & Scripting: Develop and maintain automation scripts using tools like Terraform, AWS CloudFormation, or Azure Resource Manager to streamline network provisioning and management tasks.
• Collaboration: Work closely with operations teams, application developers, and system administrators to support and troubleshoot network-related issues. Provide guidance on best practices for cloud network architecture and operations.
• Documentation & Reporting: Create and maintain detailed documentation for network configurations, processes, and procedures. Generate reports on network performance, incidents, and resolutions.
• Tier 3 Support - when our CDK operational teams get stuck with a cloud networking issues, you will be the point of escalation.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field, or equivalent work experience.
• Experience: Minimum of 5-7 years of experience in network engineering with a focus on cloud environments (AWS and Azure).
• Certifications: Relevant certifications such as AWS Certified Solutions Architect, AWS Certified Advanced Networking, AWS or Microsoft Security Specialization, Microsoft Certified: Azure Network Engineer Associate, or similar are highly desirable.

​Skills:

• This is a hands-on role.  You will be the subject matter expert at CDK for all things AWS networking and security.
• Strong understanding and hands-on use of cloud networking capabilities and services (ex. Routing, VPC’s, Transit Gateways, VPN’s, Direct Connect, Azure Virtual Network, ExpressRoute).
• Experience with network monitoring (New Relic, CloudWatch) and diagnostic tools.  Extensive use of Cloud Watch and log files for forensics and operational remediations.
• Knowledge of network security practices and tools (CSPM tools, firewalls, IDS/IPS, encryption).  Deep experience with network design within a public cloud environment with a strong focus on perimeter security.
• Familiarity with automation tools and frameworks (Terraform, AWS CloudFormation, Ansible, Puppet, etc.).
• Excellent problem-solving skills and the ability to troubleshoot complex network issues.
• Strong communication skills with the ability to work collaboratively in a team environment.
• Experience with AWS and Azure Native services like AWS Config, Cloud Watch, Cloud Trail, Route53, Guard Duty, Detective, Inspector, Security Hub, Secrets Server, KMS, AWS Shield, Security Groups, etc.
• Experience with 3rd party tools like Rapid7, Prisma Cloud (CSPM), Wiz, Delinea, etc.
• Experience writing scripts using AWS API to pull data and/or automation cloud admin/governance functions.