AWS Network Engineer (AL-FNC251201 002/01)

We are seeking a dedicated AWS Network Engineer to design, implement, and support secure, scalable, and high-availability cloud network infrastructure within the client’s environment. This role involves working closely with project teams, system integrators, vendors and internal IT and cybersecurity teams to ensure the reliability, security, and compliance of AWS network solutions that support the client’s digital services and mission-critical systems. You will play a key role in strengthening the client’s infrastructure through robust cloud connectivity and secure network design.

Responsibilities

• Design, deploy, and maintain AWS Virtual Private Cloud (VPC) environments including subnets, route tables, security groups, network access control lists, Transit Gateways, Route 53 (DNS) and PrivateLink in alignment with the client’s standards and policies.
• Configure, manage and maintain hybrid cloud connectivity (e.g., AWS Direct Connect, Gateways, Site-to-Site VPN, Transit Gateway) between on-premises data centres and AWS environments.
• Configure and manage DNS and DHCP network services.
• Configure and manage Network Load Balancing and Traffic Management using AWS ELB, NLB, ALB, CloudFront and Nginx to ensure traffic optimization, latency reduction, and high availability for distributed applications.
• Implement network security controls to comply with the client’s security guidelines and policies, ensuring confidentiality and integrity of the client’s data and systems.
• Implement and administer Firewalls and Security Appliances, e.g., Palo Alto Firewalls and VPN infrastructure, and cloud-native firewalls like AWS WAF.
• Lead incident response efforts, collaborating closely with vendors and project teams to ensure timely resolution.
• Provide advice and technical network support for internet-facing applications, ensuring smooth deployment and resolving pre- and post-implementation issues.
• Collaborate with cloud architects, cybersecurity teams, and DevOps engineers to design secure and resilient cloud network topologies.
• Implement network automation and Infrastructure-as-Code (IaC) using tools such as Terraform, Ansible, AWS CloudFormation.
• Troubleshoot and optimize network performance using AWS CloudWatch, VPC Flow Logs, CloudTrail, and other monitoring tools.
• Provide technical support for Windows and Linux EC2 servers, assisting with provisioning, configuration, scripting and troubleshooting.
• Maintain accurate network documentation, topology diagrams, operational procedures and best practices in compliance with audit and change management processes.
• Stay up to date with AWS networking advancements, GovTech cloud policies, and cybersecurity directives to propose continuous improvements.

Qualifications

• Diploma or Bachelor’s degree in Computer Science, Information Systems, or related field.
• 1 or more years of experience in network engineering, including managing AWS or hybrid cloud networks.
• Strong understanding of TCP/IP, HTTP/S, DNS, DHCP, routing protocols (BGP), VPNs, and load balancing.
• Proficiency with AWS networking services such as VPC, Transit Gateway, PrivateLink, Route 53, Direct Connect, Load Balancers and Network Firewall.
• Expertise in network segmentation, traffic filtering, and firewall policy management to enforce security.
• Proficiency with network architectures, optimization and troubleshooting.
• Hands-on experience with IaC and automation tools e.g., Terraform, CloudFormation and Ansible.
• Familiarity with Zero Trust network design principles.
• Excellent analytical and communication skills with the ability to work collaboratively across service providers and project teams.

Preferred skills and qualifications

• AWS Certified Advanced Networking – Specialty or AWS Certified Solutions Architect – Associate/Professional.
• Palo Alto Networks Certified Next-Generation Firewall Engineer.
• Experience with security and compliance frameworks relevant to government and regulated environments.