Description

You own the design and implementation of secure AWS network architectures.

Responsibilities

• Design and implement secure AWS network architectures, including VPCs, subnet routing, NAT Gateways, and Transit Gateways.
• Configure and manage network security controls such as Security Groups, Network ACLs, Route Tables, and AWS Network Firewall.
• Implement and manage VPN connections, Direct Connect, and private connectivity between on-prem and AWS environments.
• Develop and maintain IAM policies, roles, and least-privilege access models for network and security resources.
• Monitor traffic flows using VPC Flow Logs, GuardDuty, CloudWatch, AWS Config, and Security Hub.

Required Skills

• 6+ years of hands-on experience with AWS Networking services (VPC, Transit Gateway, Direct Connect, Route 53, VPN).
• In-depth knowledge of AWS Security services (IAM, KMS, WAF, GuardDuty, Security Hub, CloudTrail, Config).
• Proficiency in Terraform or AWS CloudFormation for Infrastructure as Code (IaC).
• Strong understanding of Zero Trust, Network Segmentation, and Defense-in-Depth strategies.
• Experience with firewall concepts, IDS/IPS, SSL/TLS, and network encryption.
• Familiarity with network protocols (TCP/IP, BGP, DNS, HTTP/S, IPSec, etc.).
• Hands-on experience with SIEM tools like Splunk or ELK.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
• Experience with scripting languages such as Python, Bash, or PowerShell.

Preferred Skills

• AWS certifications such as AWS Certified Security – Specialty or AWS Advanced Networking – Specialty.
• Experience in hybrid cloud network security or multi-account AWS architectures.

Key Skills

Education

Bachelors Degree, Masters Degree, PHD