Platform Architecture (40%) 

• Design and implement secure, scalable AWS network architectures (VPCs, subnets, routing, multi-tenant isolation) 

• Architect hybrid connectivity solutions using Direct Connect, VPNs, Transit Gateways 

• Design and implement firewall strategies: Network ACLs, Security Groups, AWS Network Firewall, and WAF rules aligned with security best practices 

• Advanced understanding of NACLs, Security Groups, WAF, and AWS Network Firewall 

• Implement Route 53, DHCP, AWS PrivateLink, and DNS/IPAM solutions 

• Design high-availability and disaster recovery network architectures 

• Create and maintain network architecture diagrams and SOPs 

• Collaborate with Infosec team to design network architectures that align with threat models and security controls 

• Participate in security incident response involving network systems 

Infrastructure Automation (40%) 

• Develop and maintain Terraform modules for AWS infrastructure with security guardrails embedded (e.g., encryption at rest/transit, least-privilege IAM policies, NACLs, Security Groups)  

• Partner with Infosec to establish and enforce Terraform coding standards and security controls 

• Build environment aware Terraform modules for reusability 

• Implement GitOps workflows and promote infrastructure changes across dev/staging/prod 

• Automate firewall rule provisioning and updates; implement drift detection for security controls 

• Automate operational tasks using Python and shell scripting 

• Manage backup and recovery procedures 

• Implement CI/CD integration for infrastructure deployments 

Operations & Observability (20%) 

• Audit, maintain, and troubleshoot firewall rules and security controls (NACLs, Security Groups, Network Firewall, WAF) including rule optimization, change management, incident response, and compliance reviews 

• Design and implement monitoring/alerting using DataDog, Prometheus and AWS CloudWatch 

• Analyze VPC Flow Logs and AWS networking metrics for performance optimization 

• Lead troubleshooting of complex network and platform issues 

• Participate in on-call rotation 

• Maintain runbooks and operational documentation 

• AWS Networking & Firewall Operations: VPC, peering, subnets, Transit Gateways, Route 53, Direct Connect, VPNs, NACLs, Security Groups, AWS Network Firewall, WAF, AWS PrivateLink, IPAM  

• Firewall Rule Management: Writing, debugging, and maintaining network ACLs and Security Groups at scale; understanding of stateful vs. stateless filtering AWS Services: EC2, RDS, ECS/EKS, Lambda, IAM, CloudFormation, S3 

• Infrastructure as Code: Terraform (primary); CloudFormation exposure 

• Programming: Python + Bash/Shell scripting 

• Linux fundamentals and networking (TCP/IP, routing, DNS) 

• On-call operational support