AWS Network Engineer Hybrid Connectivity & Automation
Please mention DailyRemote when applying
AI Summary
Design and implement automated hybrid network connectivity patterns using AWS VPC Lattice, Cloud WAN, and Direct Connect to support cloud migrations. Develop reusable IaC 'Lego blocks' using CDK and Python to enable AI-driven or self-service migration tooling.
Our client, a 3rd-generation management consulting firm, is working on a project for their client - a global financial institution operating in a highly regulated environment and investing in modern cloud governance to strengthen security, compliance, and enterprise risk visibility across AWS and Azure.
They are now looking to add to their team and are hiring a "AWS Network Engineer – Hybrid Connectivity & Automation”. This role will be 100% remote.
Role Overview
Our Client, is modernizing its migration pathways from on‐prem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka → MSK, object storage → S3, and future database replication.
This is not a Kafka/storage engineering role — it is AWS networking + automation, creating reusable CDK "Lego blocks” that will eventually be consumed by AI‐driven or self‐service migration tooling.
Key Responsibilities
They are now looking to add to their team and are hiring a "AWS Network Engineer – Hybrid Connectivity & Automation”. This role will be 100% remote.
Role Overview
Our Client, is modernizing its migration pathways from on‐prem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka → MSK, object storage → S3, and future database replication.
This is not a Kafka/storage engineering role — it is AWS networking + automation, creating reusable CDK "Lego blocks” that will eventually be consumed by AI‐driven or self‐service migration tooling.
Key Responsibilities
- Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink
- Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda
- Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads
- Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)
- Design IAM data perimeter controls to replace traditional firewall rules
- Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automation‐friendly
- Support connectivity across DX on‐ramps, Cloud WAN segments, and customer‐managed VPCs
- Ensure secure, compliant, TLS‐encrypted traffic flows between on‐prem and AWS
Required Skills & Experience
- Hands‐on expertise with AWS VPC Lattice
- Resource Configs
- Resource Gateway
- Service Networks
- Service Network VPC Endpoints
- Strong experience with AWS Cloud WAN
- Segments, route filtering, advanced routing
- TGW peering patterns
- Deep knowledge of AWS Direct Connect
- VIF automation, VGW direct attach
- DX Gateway patterns
- 100G dedicated circuits
- Expertise with AWS PrivateLink****:
- Interface endpoints at scale
- Endpoint policies using org‐level condition keys
- Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)
- Experience designing IAM data perimeter boundaries
- Strong IaC automation using CDK (Python), CloudFormation, Lambda
- Hybrid networking experience (on‐prem ↔ AWS)
Nice to Have
- Knowledge of Kafka/MSK, S3, or database replication flows
- Experience in large enterprise networking
- Prior work on migration tooling or hybrid data movement
What This Role Is NOT
- Traditional TGW hub‐and‐spoke networking
- Manual VPC provisioning
- A Kafka/storage engineering role
- A fit for candidates without hands‐on VPC Lattice (2024 GA features)
This is a remote position.
Automatically Apply to the Best Remote Jobs
Stop the endless job search. Our AI finds and applies to the best jobs for you.
