AWS
Cloud Engineer – AWS Networking, Infrastructure & Security
Toronto, ON – 3 Days WFO
Experience:
• 6–8 years
Essential Skills:
• More than 5 years of hands-on AWS experience in production environments.
• Strong knowledge of AWS Networking:
• VPC
• Subnets
• Transit Gateway (TGW)
• Direct Connect
• Route 53
• ALB / NLB
• Experience with:
• AWS IAM
• SCPs
• Multi-account AWS Organizations
• Proficiency in Infrastructure as Code (IaC):
• Terraform
• CloudFormation
• AWS CDK
• Familiarity with AWS security services:
• GuardDuty
• Security Hub
• Inspector
• Macie
• AWS Certified Solutions Architect Associate or Professional preferred.
• Scripting proficiency in:
• Python
• Bash
• PowerShell
• Experience with VPC Flow Log analysis and ENI-level troubleshooting.
Role & Responsibilities:
• Design and deploy AWS infrastructure including:
• VPCs
• Subnets
• Security Groups
• Route Tables
• Transit Gateways
• VPN / Direct Connect
• Configure and manage AWS VPC:
• Interface Endpoints
• ALB / NLB
• PrivateLink services
• Manage AWS compute services:
• EC2
• EKS
• ECS
• Lambda
• Auto Scaling Groups
• Implement and maintain AWS IAM:
• Roles
• Policies
• Permission Boundaries
• SCPs in multi-account environments
• Configure:
• VPC Flow Logs
• CloudTrail
• CloudWatch
• AWS Security Hub
• Build and manage IaC deployments using:
• Terraform
• AWS CloudFormation
• AWS CDK
• Support cross-cloud connectivity between AWS and Azure, including:
• AMQP via Event Hub
• S3 cross-account logging
• Develop and maintain CI/CD pipelines for AWS workloads.
• Troubleshoot:
• VPC routing
• ENI-level connectivity
• Security Group / NACL issues
• Maintain technical documentation, runbooks, and architecture diagrams.
Nice to Have Skills:
• AWS Certified DevOps Engineer or Advanced Networking Specialty.
• Experience with AWS-to-Azure hybrid connectivity scenarios.
