Principal AWS Network Infrastructure Engineer

About our client

Our client is a leading global provider of legal, regulatory and business information and analytics that help customers increase productivity, improve decision-making and outcomes, and advance the rule of law around the world.

They help lawyers win cases, manage their work more efficiently, serve their clients better and grow their practices. They assist corporations in better understanding their markets, monitoring their brands and competition, and in mitigating business risk. They collaborate with universities to educate students, and support nation-building with governments and courts by making laws accessible and strengthening legal infrastructures. They partner with leading global associations and customers to collect evidence against war criminals and provide tools to combat human trafficking.

Job

Responsibilities :

Design and Implementation:

• Architect and deploy scalable, secure, and highly available network infrastructure solutions in AWS

Network Management:

• Manage and optimize AWS networking services such as VPC, Direct Connect, Route 53, CloudWAN, and Transit Gateway

Security:

• Implement and maintain network security best practices, including firewalls, VPNs, and security groups

Automation:

• Develop and maintain automation scripts using tools like Terraform, CloudFormation, and Python

Monitoring and Troubleshooting:

• Monitor network performance and troubleshoot issues to ensure optimal performance and reliability

Collaboration:

• Work with cross-functional teams to support application development and deployment

Documentation:

• Create and maintain detailed network documentation and diagrams

Cost Management:

• Monitor and optimize cloud costs, implementing cost-saving measures where possible

Compliance and Governance:

• Ensure that all cloud network solutions comply with our client standards

Performance Tuning:

• Continuously improve the performance and reliability of network systems

Incident Response:

• Lead incident response efforts for network-related issues and outages

Training and Mentorship:

• Provide training and mentorship to junior network engineers and other team members

Innovation/Continuous Learning:

• Stay updated with the latest cloud networking technologies and propose innovative solutions to improve the infrastructure

Business Competencies:

• Adaptable to work effectively within a variety of situations and with various individuals, groups or independently
• Ability to document and communicate effectively, explaining technical concepts and network initiatives in business terms in both individual and group settings
• Must be tenacious, overcoming obstacles and identifying risks
• Attention to detail will be critical to assist with the successful implementation of initiatives

Requirements :

• 10+ years of experience in IT, with at least 5+ years in AWS cloud engineering and architecture.
• Strong understanding of AWS network infrastructure and service integration, including VPC, IAM, Transit Gateway, and CloudFormation, and how AWS services such as EC2, EKS, RDS, S3, and Lambda operate within those network architectures.
• Strong experience with Terraform, CloudFormation, and automation scripting (Bash, Python, PowerShell).
• Proficiency in monitoring and logging tools (DataDog, Splunk, Coralogix, CloudWatch).

Technical Skills:

• In-depth knowledge of AWS networking services and best practices, such as VPC, AWS Firewall, Transit Gateway, WAF, Security Groups, CloudWAN, NACLS, Shield Advance, and Direct Connect
• Advanced understanding of networking protocols and services such as BGP, OSPF, TCP/IP, DNS, DHCP, and VPNs
• Proficiency in network security principles and tools
• Skilled in network automation and scripting
• Experience in developing IaC with advanced skills in tools such as Terraform, AWS CloudFormation, and Ansible for automating infrastructure deployment and management
• Familiar with DevOps practices / CI/CD pipelines using tools like Jenkins, GitLab CI, or GitHub Actions to automate testing and deployment