AWS Network Architect

STAFFXPERT LLC is seeking an AWS Network Architect on behalf of our client in a Remote location. This role requires a highly skilled professional with deep expertise in AWS cloud networking and security. The ideal candidate will be responsible for designing, implementing, and optimizing secure, scalable, and highly available network architectures while aligning with business and compliance requirements., * Design and implement scalable AWS network architectures, including VPCs, subnets, routing, and connectivity solutions

• Develop and manage hybrid cloud connectivity (VPN, Direct Connect) between on-premises and AWS environments
• Architect and enforce secure network designs using AWS security services such as Security Groups, NACLs, AWS WAF, Shield, and Network Firewall
• Implement Zero Trust and least-privilege access models
• Conduct threat modeling, risk assessments, and vulnerability analysis
• Integrate IAM, encryption, and monitoring solutions into network architectures
• Optimize network performance, availability, and cost efficiency
• Automate infrastructure deployment using Terraform or CloudFormation
• Monitor and troubleshoot network environments using CloudWatch, VPC Flow Logs, and GuardDuty
• Ensure compliance with industry standards (e.g., CIS, NIST, ISO 27001)
• Provide technical leadership and mentorship to engineering teams

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• 7+ years of experience in network architecture and engineering
• 4+ years of hands-on experience with AWS cloud networking
• Strong understanding of TCP/IP, DNS, routing, firewalls, and load balancing
• Experience with AWS networking services such as VPC, Transit Gateway, Route 53, ELB, and PrivateLink
• Strong knowledge of AWS security best practices and cloud security frameworks
• Experience with Infrastructure as Code (Terraform or CloudFormation), * AWS Certified Solutions Architect - Professional or Advanced Networking Specialty
• AWS Certified Security - Specialty
• Experience with multi-account AWS environments and landing zone architecture
• Knowledge of container networking (EKS, ECS) and microservices architectures
• Familiarity with SIEM and security monitoring tools
• Experience working in regulated industries such as finance, healthcare, or government