Senior Cloud Network Engineer

We are looking for a Senior AWS Cloud Network Engineer to support the design, implementation,

operation, and continuous improvement of secure and scalable cloud networking services in a

hybrid enterprise environment.

The ideal candidate has strong traditional networking foundations and hands-on AWS

networking experience, with the ability to work using Infrastructure as Code, automation, security

guardrails, and operational best practices. Azure networking knowledge is a plus, but not

mandatory.

What project we have for you

Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications.

Intellia's mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As a DevOps engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform.

The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices.

Project is in production for 2+ years, being supported by multiple teams.

Our technical domains are

• AWS cloud, partially Azure
• SSO, Organizations, Service control policies, access models.
• IAAC: terraform enterprise, terratest, chalice
• Serverless: lambda, step functions, wide range of misc automations, fargate
• System, Application, Network and security architectures
• Orchecstration: k8s (eks)
• SRE activities (logging, tracing, monitoring), OpsGenie, Splunk
• Hashicorp Vault
• Hybrid Networking

What you will do

• Design, implement, and operate AWS cloud networking components for enterprise-scale environments.
• Support VPC, subnet, routing, DNS, private connectivity, load balancing, and hybrid connectivity designs.
• Implement secure connectivity between cloud workloads, corporate networks, on-premises environments, and external partners.
• Troubleshoot complex routing, DNS, firewall, and connectivity issues.
• Build and maintain cloud networking infrastructure using Terraform or equivalent IaC tooling.
• Support network security, segmentation, private access, secure egress, and controlled exposure of public services.
• Contribute to operational reliability through monitoring, documentation, runbooks, and continuous improvement.
• Work with platform, security, architecture, and application teams to deliver approved cloud networking patterns.

What you need for this

• Minimum 5 years of experience in network engineering, cloud networking, infrastructure engineering, or platform engineering.
• Minimum 3 years of hands-on AWS networking experience.
• Strong knowledge of AWS VPC, subnets, route tables, Transit Gateway, Route 53, Direct Connect, VPN, NAT Gateway, load balancers, security groups, WAF and NACLs.
• Strong understanding of TCP/IP, DNS, HTTP/S, routing, NAT, firewalling, segmentation, and traffic flows.
• Practical knowledge of BGP, route propagation, route filtering, and hybrid connectivity models.
• Hands-on experience with Terraform or equivalent Infrastructure as Code tooling.
• Experience with Git, pull requests, code reviews, and CI/CD pipelines.
• Strong troubleshooting skills across cloud, on-premises, and hybrid environments.
• Good English communication and documentation skills.

Nice-to-have

• Azure networking knowledge, including VNets, NSGs, Azure Firewall, Private DNS, Private Endpoint, ExpressRoute, or Virtual WAN.
• Experience with AWS Cloud WAN, PrivateLink, Gateway Load Balancer, centralized inspection, or secure egress patterns.
• Experience with observability tools, flow logs, firewall logs, dashboards, and alerting.
• Scripting experience with Python, Bash, or PowerShell.