AWS Network Engineer Hybrid Connectivity & Automation

Our Client, is modernizing its migration pathways from onprem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka MSK, object storage S3, and future database replication. This is not a Kafka/storage engineering role it is AWS networking + automation, creating reusable CDK “Lego blocks that will eventually be consumed by AIdriven or selfservice migration tooling., Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding) Design IAM data perimeter controls to replace traditional firewall rules Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automationfriendly Support connectivity across DX onramps, Cloud WAN segments, and customermanaged VPCs Ensure secure, compliant, TLSencrypted traffic flows between onprem and AWS

Handson expertise with AWS VPC Lattice Resource Configs Resource Gateway Service Networks Service Network VPC Endpoints Strong experience with AWS Cloud WAN Segments, route filtering, advanced routing TGW peering patterns Deep knowledge of AWS Direct Connect VIF automation, VGW direct attach DX Gateway patterns 100G dedicated circuits Expertise with AWS PrivateLink**: Interface endpoints at scale Endpoint policies using orglevel condition keys Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS) Experience designing IAM data perimeter boundaries Strong IaC automation using CDK (Python), CloudFormation, Lambda Hybrid networking experience (onprem AWS) Nice to Have Knowledge of Kafka/MSK, S3, or database replication flows Experience in large enterprise networking Prior work on migration tooling or hybrid data movement