AWS Network Engineer Hybrid Connectivity & Automation
$500–$700 year
RemoteUnited States
Job Summary
Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink. Build reusable, automated IaC patterns with CDK (Python), CloudFormation, and Lambda to support migrations for MSK Replicator, S3 PrivateLink hubs, and future database replication. Implement Route 53 Resolver for hybrid DNS resolution and design IAM data perimeter controls to replace traditional firewall rules. Ensure secure, compliant, TLS-encrypted traffic flows between on-prem and AWS while working closely with migration tooling teams to create automation-friendly, consumable network patterns. This role focuses on modernizing migration pathways from on-prem to AWS for a global financial institution within a highly regulated environment, creating foundational blocks for AI-driven or self-service migration tooling.
Required Qualifications
- Hands-on expertise with AWS VPC Lattice
- Resource Configs
- Resource Gateway
- Service Networks
- Service Network VPC Endpoints
- Strong experience with AWS Cloud WAN
- Segments, route filtering, advanced routing
- TGW peering patterns
- Deep knowledge of AWS Direct Connect
- VIF automation, VGW direct attach
- DX Gateway patterns
- 100G dedicated circuits
- Expertise with AWS PrivateLink
- Interface endpoints at scale
- Endpoint policies using org-level condition keys
- Strong understanding of Route 53 Resolver
- inbound/outbound endpoints, hybrid DNS
- Experience designing IAM data perimeter boundaries
- Strong IaC automation using CDK (Python), CloudFormation, Lambda
- Hybrid networking experience (on-prem ↔ AWS)
- 100% remote
Desired Qualifications
- Knowledge of Kafka/MSK, S3, or database replication flows
- Experience in large enterprise networking
- Prior work on migration tooling or hybrid data movement
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.