"AWS Network Engineer Hybrid Connectivity & Automation . This role will be 100% remote.
Remote W2 or Full time
Long term
Role Overview
Our Client, is modernizing its migration pathways from onprem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka MSK, object storage S3, and future database replication.
This is not a Kafka/storage engineering role it is AWS networking + automation, creating reusable CDK "Lego blocks that will eventually be consumed by AIdriven or selfservice migration tooling.
Key Responsibilities
Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink
Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda
Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads
Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)
Design IAM data perimeter controls to replace traditional firewall rules
Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automationfriendly
Support connectivity across DX onramps, Cloud WAN segments, and customermanaged VPCs
Ensure secure, compliant, TLSencrypted traffic flows between onprem and AWS
Required Skills & Experience
Handson expertise with AWS VPC Lattice
Resource Configs
Resource Gateway
Service Networks
Service Network VPC Endpoints
Strong experience with AWS Cloud WAN
Segments, route filtering, advanced routing
TGW peering patterns
Deep knowledge of AWS Direct Connect
VIF automation, VGW direct attach
DX Gateway patterns
100G dedicated circuits
Expertise with AWS PrivateLink**:
Interface endpoints at scale
Endpoint policies using orglevel condition keys
Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)
Experience designing IAM data perimeter boundaries
Strong IaC automation using CDK (Python), CloudFormation, Lambda
Hybrid networking experience (onprem AWS)
Nice to Have
Knowledge of Kafka/MSK, S3, or database replication flows
Experience in large enterprise networking
Prior work on migration tooling or hybrid data movement
What This Role Is NOT
Traditional TGW hubandspoke networking
Manual VPC provisioning
A Kafka/storage engineering role
A fit for candidates without handson VPC Lattice (2024 GA features)
Never miss an opportunity! Create an alert based on the job you applied for.
