AWS Cloud Architect

We are seeking a highly experienced AWS Cloud & Network Architect / Lead to design and implement scalable, secure, and resilient AWS cloud and network architectures.

This is a cloud and network architecture-focused position , requiring deep hands-on expertise in AWS networking, AWS CDK, and AWS VPC Lattice .

Critical Mandatory Requirements

Candidates must have hands-on experience with:

• AWS CDK development using Python and/or TypeScript
• AWS VPC Lattice implementation and architecture
• AWS cloud and network architecture within complex enterprise environments
• Multi-account AWS networking and connectivity

Candidates whose experience is primarily DevOps, CI/CD, or Terraform without hands-on AWS CDK and VPC Lattice experience will not meet the core requirements of this role., * Design scalable, secure, highly available, and resilient AWS cloud architectures for enterprise applications and workloads.

• Architect AWS environments across multiple accounts, regions, and VPCs .
• Establish standardized cloud architecture patterns covering networking, compute, storage, identity, security, and connectivity.
• Design solutions utilizing AWS services including VPC, EC2, ECS/EKS, Lambda, RDS, S3, IAM, Route 53, CloudWatch, and related services .
• Define architectural standards and reusable patterns for enterprise AWS environments.

AWS Network Architecture & VPC Lattice

• Architect, implement, and manage AWS VPC Lattice solutions for application and service connectivity.
• Design VPC Lattice service networks, services, routing, authentication, authorization, and access-control architectures .
• Develop scalable connectivity patterns for applications and services distributed across multiple VPCs and AWS accounts .
• Design enterprise AWS networking including VPC architecture, subnetting, routing, DNS, security groups, load balancing, and network security .
• Design secure connectivity and service-to-service communication patterns for distributed and cloud-native applications.
• Troubleshoot complex AWS networking, routing, DNS, security, and service-connectivity issues.
• Ensure network designs meet enterprise requirements for security, resiliency, scalability, and operational supportability.

AWS CDK Architecture & Automation

• Design and develop AWS infrastructure using AWS CDK with Python and/or TypeScript.
• Build custom and reusable CDK constructs, stacks, and architectural patterns .
• Create CDK-based automation for cloud networking components and application infrastructure.
• Develop reusable infrastructure patterns supporting VPCs, IAM, compute, containers, serverless services, storage, and networking.
• Establish standards for CDK project structure, configuration, environment management, and reusable components.
• Use Infrastructure as Code principles to ensure cloud environments are repeatable, controlled, and maintainable.
• Work with Terraform where required while using AWS CDK as a key infrastructure automation technology .

Cloud Security & Governance

• Design cloud and network architecture following AWS security and least-privilege principles.
• Define IAM roles, policies, cross-account access, and service authorization models.
• Build appropriate network segmentation, access-control, and security patterns.
• Support architecture aligned with enterprise security, governance, regulatory, and compliance requirements.
• Incorporate logging, monitoring, auditing, and observability into cloud and network designs.

Architecture Leadership

• Lead cloud and network architecture discussions and provide technical direction to engineering teams.
• Translate application and infrastructure requirements into scalable AWS architecture.
• Create architecture documentation, standards, reference designs, and implementation patterns.
• Perform architecture reviews and identify security, networking, scalability, and resiliency risks.
• Collaborate with cloud, network, security, application, and infrastructure engineering teams to implement architectural solutions.

• Extensive hands-on experience with AWS cloud architecture and AWS networking .
• Strong hands-on AWS CDK development experience using Python and/or TypeScript.
• Demonstrated ability to create custom/reusable AWS CDK constructs, stacks, and infrastructure components .
• Hands-on implementation and architecture experience with AWS VPC Lattice.
• Strong knowledge of VPC Lattice service networks, services, routing/connectivity, authentication, authorization, and access controls .
• Strong AWS networking expertise, including VPCs, subnets, routing, Route 53/DNS, security groups, load balancing, and connectivity architecture .
• Experience designing multi-account and multi-VPC AWS architectures .
• Strong understanding of IAM, cross-account access, cloud security, and network security .
• Experience designing highly available, scalable, resilient, and secure AWS environments.
• Strong troubleshooting skills across AWS networking and distributed cloud environments.

Preferred Skills

• Experience with AWS Organizations and enterprise multi-account architecture.
• Terraform knowledge.
• Experience with ECS, EKS, Kubernetes, and cloud-native application architectures .
• Knowledge of AWS monitoring and logging services including CloudWatch and CloudTrail.
• Experience working within highly regulated enterprise environments.
• AWS architecture or networking certifications are advantageous.

The annual base salary for this position is up to $130K depending on experience and other qualifications of the successful candidate., Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contributions
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Work model:

At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs. Based on this role’s business requirements, this is a remote role in US.

The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.