AWS Network Engineer Hybrid Connectivity & Automation

Remote W2 or Full time

Long term

Role Overview

Our Client, is modernizing its migration pathways from onprem to AWS. This role focuses on building repeatable, automated AWS network connectivity patterns that support migrations for Kafka MSK, object storage S3, and future database replication.

This is not a Kafka/storage engineering role it is AWS networking + automation, creating reusable CDK "Lego blocks that will eventually be consumed by AIdriven or selfservice migration tooling.

Key Responsibilities

Design and implement hybrid network connectivity using AWS VPC Lattice, Cloud WAN, Direct Connect, and PrivateLink

Build reusable, automated IaC patterns using CDK (Python), CloudFormation, and Lambda

Develop scalable patterns for MSK Replicator, S3 PrivateLink hubs, and future migration workloads

Implement Route 53 Resolver for hybrid DNS resolution (inbound/outbound endpoints, conditional forwarding)

Design IAM data perimeter controls to replace traditional firewall rules

Work closely with migration tooling teams to ensure network patterns are consumable, repeatable, and automationfriendly

Support connectivity across DX onramps, Cloud WAN segments, and customermanaged VPCs

Ensure secure, compliant, TLSencrypted traffic flows between onprem and AWS

Required Skills & Experience

Handson expertise with AWS VPC Lattice

Resource Configs

Resource Gateway

Service Networks

Service Network VPC Endpoints

Strong experience with AWS Cloud WAN

Segments, route filtering, advanced routing

TGW peering patterns

Deep knowledge of AWS Direct Connect

VIF automation, VGW direct attach

DX Gateway patterns

100G dedicated circuits

Expertise with AWS PrivateLink**:

Interface endpoints at scale

Endpoint policies using orglevel condition keys

Strong understanding of Route 53 Resolver (inbound/outbound endpoints, hybrid DNS)

Experience designing IAM data perimeter boundaries

Strong IaC automation using CDK (Python), CloudFormation, Lambda

Hybrid networking experience (onprem AWS)

Nice to Have

Knowledge of Kafka/MSK, S3, or database replication flows

Experience in large enterprise networking

Prior work on migration tooling or hybrid data movement

What This Role Is NOT

Traditional TGW hubandspoke networking

Manual VPC provisioning

A Kafka/storage engineering role

A fit for candidates without handson VPC Lattice (2024 GA features)