AWS Cloud Engineer – AWS Networking, Infrastructure & Security

Toronto, ON – 3 Days WFO

Experience:

- 6–8 years

Essential Skills

- More than 5 years of hands-on AWS experience in production environments.
- Solid knowledge of AWS Networking:
- VPC
- Subnets
- Transit Gateway (TGW)
- Direct Connect
- Route 53
- ALB / NLB
- Experience with:
- AWS IAM
- SCPs
- Multi-account AWS Organizations
- Proficiency in Infrastructure as Code (IaC):
- Terraform
- CloudFormation
- AWS CDK
- Familiarity with AWS security services:
- GuardDuty
- Security Hub
- Inspector
- Macie
- AWS Certified Solutions Architect Associate or Professional preferred.
- Scripting proficiency in:
- Python
- Bash
- PowerShell
- Experience with VPC Flow Log analysis and ENI-level troubleshooting.

Role & Responsibilities:

- Design and deploy AWS infrastructure including:
- VPCs
- Subnets
- Security Groups
- Route Tables
- Transit Gateways
- VPN / Direct Connect
- Configure and manage AWS VPC:
- Interface Endpoints
- ALB / NLB
- PrivateLink services




- Manage AWS compute services:
- EC2
- EKS
- ECS
- Lambda
- Auto Scaling Groups
- Implement and maintain AWS IAM:
- Roles
- Policies
- Permission Boundaries
- SCPs in multi-account environments
- Configure:
- VPC Flow Logs
- CloudTrail
- CloudWatch
- AWS Security Hub
- Build and manage IaC deployments using:
- Terraform
- AWS CloudFormation
- AWS CDK
- Support cross-cloud connectivity between AWS and Azure, including:
- AMQP via Event Hub
- S3 cross-account logging
- Develop and maintain CI/CD pipelines for AWS workloads.
- Troubleshoot:
- VPC routing
- ENI-level connectivity
- Security Group / NACL issues
- Maintain technical documentation, runbooks, and architecture diagrams.

Nice to Have Skills:

- AWS Certified DevOps Engineer or Advanced Networking Specialty.
- Experience with AWS-to-Azure hybrid connectivity scenarios.

📌 AWS Cloud Engineer – AWS Networking, Infrastructure & Security (Toronto)
🏢 Astra North Infoteck
📍 Toronto