AWS Network Engineer @ REMOTE

Our client, is modernizing its migration pathways from on-prem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka * MSK, object storage * S3, and future database replication. This is not a Kafka/storage engineering role - it is AWS networking + automation, creating reusable CDK “Lego blocks” that will eventually be consumed by AI-driven or self-service migration tooling., * Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink

• Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda
• Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads
• Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)
• Design IAM data perimeter controls to replace traditional firewall rules
• Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automation-friendly
• Support connectivity across DX on-ramps, Cloud WAN segments, and customer-managed VPCs
• Ensure secure, compliant, TLS-encrypted traffic flows between on-prem and AWS

• Hands-on expertise with AWS VPC Lattice
• • Resource Configs* Resource Gateway* Service Networks* Service Network VPC Endpoints

• Strong experience with AWS Cloud WAN

• Segments, route filtering, advanced routing* TGW peering patterns

• Deep knowledge of AWS Direct Connect

• VIF automation, VGW direct attach* DX Gateway patterns* 100G dedicated circuits* Interface endpoints at scale* Endpoint policies using org-level condition keys
• Expertise with AWS PrivateLink**:
• Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)
• Experience designing IAM data perimeter boundaries
• Strong IaC automation using CDK (Python), CloudFormation, Lambda
• Hybrid networking experience (on-prem AWS)

Nice to Have

• Knowledge of Kafka/MSK, S3, or database replication flows
• Experience in large enterprise networking
• Prior work on migration tooling or hybrid data movement

$70 - $75 an hour - Full-time, Contract