AWS Network Engineer Hybrid Connectivity & Automation

Our client, a 3rd-generation management consulting firm, is working on a project for their client - a global financial institution operating in a highly regulated environment and investing in modern cloud governance to strengthen security, compliance, and enterprise risk visibility across AWS and Azure.
They are now looking to add to their team and are hiring a "AWS Network Engineer Hybrid Connectivity & Automation . This role will be 100% remote.
Role Overview
Our Client, is modernizing its migration pathways from onprem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka MSK, object storage S3, and future database replication.
This is not a Kafka/storage engineering role it is AWS networking + automation, creating reusable CDK "Lego blocks that will eventually be consumed by AIdriven or selfservice migration tooling.
Key Responsibilities

• Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink
• Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda
• Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads
• Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)
• Design IAM data perimeter controls to replace traditional firewall rules
• Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automationfriendly
• Support connectivity across DX onramps, Cloud WAN segments, and customermanaged VPCs
• Ensure secure, compliant, TLSencrypted traffic flows between onprem and AWS

Required Skills & Experience

• Handson expertise with AWS VPC Lattice
  • Resource Configs
  • Resource Gateway
  • Service Networks
  • Service Network VPC Endpoints
• Strong experience with AWS Cloud WAN
  • Segments, route filtering, advanced routing
  • TGW peering patterns
• Deep knowledge of AWS Direct Connect
  • VIF automation, VGW direct attach
  • DX Gateway patterns
  • 100G dedicated circuits
• Expertise with AWS PrivateLink****:
  • Interface endpoints at scale
  • Endpoint policies using orglevel condition keys
• Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)
• Experience designing IAM data perimeter boundaries
• Strong IaC automation using CDK (Python), CloudFormation, Lambda
• Hybrid networking experience (onprem AWS)

Nice to Have

• Knowledge of Kafka/MSK, S3, or database replication flows
• Experience in large enterprise networking
• Prior work on migration tooling or hybrid data movement

What This Role Is NOT

• Traditional TGW hubandspoke networking
• Manual VPC provisioning
• A Kafka/storage engineering role
• A fit for candidates without handson VPC Lattice (2024 GA features)