Cloud Architect – Network

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Design, implement, and oversee sophisticated AWS networking architectures.

• Create and maintain documentation, diagrams, technical standards, and configuration baselines for network architecture.

• Work collaboratively with security teams to enforce network-security measures and controls aligned with Zero Trust principles.

• Plan and support PKI-enabled application and network functionalities.

• Prepare and document physical and network-access prerequisites for security assessments.

• Assess current network infrastructure and propose strategies for optimization, modernization, risk mitigation, and AWS migration.

• Lead hybrid cloud networking solutions that connect on-premises data centers with external environments to AWS.

• Integrate networking solutions within CI/CD pipelines and Infrastructure as Code (IaC) frameworks.

• Establish and maintain monitoring, detection, and cybersecurity threat analysis capabilities for the network.

• Oversee network performance, diagnose intricate connectivity and security problems, and enact corrective measures.

• Engage in Red Team/Blue Team exercises.

• Ensure compliance with FedRAMP, NIST SP 800-53, FISMA, and other federal security regulations.

• Function effectively in an Agile delivery setting while meeting government project requirements and documentation standards.

• Offer technical leadership, mentorship, and support to junior cloud and network engineers.

• Stay updated on emerging AWS networking technologies and industry best practices.

⛳️ Requirements

• A Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related discipline from an accredited institution.

• Over 7 years of experience in network engineering or architecture, including at least 4 years with a focus on cloud networking within AWS environments.

• AWS Certified Advanced Networking - Specialty certification is required.

• Capability to obtain public trust clearance.

• Excellent written and verbal communication skills in English.

• Extensive knowledge of AWS networking services, such as VPC, Transit Gateway, Direct Connect, AWS PrivateLink, Route 53, Elastic Load Balancing, CloudFront, and AWS Global Accelerator.

• Solid understanding of TCP/IP, DNS, BGP, OSPF, MPLS, SD-WAN, routing, switching, segmentation, and network troubleshooting techniques.

• Experience in designing and implementing hybrid and multi-cloud network architectures that connect on-premises environments to AWS.

• Proficient with Terraform, AWS CloudFormation, or AWS CDK.

• Experience with AWS security groups, network ACLs, AWS WAF, AWS Shield, AWS Network Firewall, and secure network segmentation.

• Understanding of PKI concepts and PKI-supported authentication, encryption, identification, and digital signature processes.

• Experience in planning network access and connectivity needs for security testing environments.

• Familiarity with FedRAMP, NIST SP 800-53, FISMA, and corresponding standards.

• Experience with AWS CloudWatch, VPC Flow Logs, and third-party monitoring solutions.

• Ability to troubleshoot complex cloud networking and network security challenges in production settings.

• Strong collaborative skills, with a focus on providing technical leadership and mentorship, and participating in Agile delivery teams.

🏝️ Benefits

• Medical, dental, and vision insurance coverage.

• 401(k) retirement savings plan.

• Paid time off for vacation and personal needs.

• Paid parental leave for family support.

• Life and disability insurance options.

• Flexible spending accounts for health and dependent care.

• Commuter benefits to assist with transportation costs.

• Tuition reimbursement for continued education.