AWS Cloud Engineer – AWS Networking, Infrastructure & Security

AWS Cloud Engineer – AWS Networking, Infrastructure & Security Toronto, ON – 3 Days WFO Experience: • 6–8 years Essential Skills: • More than 5 years of hands-on AWS experience in production environments. • Strong knowledge of AWS Networking: • VPC • Subnets • Transit Gateway (TGW) • Direct Connect • Route 53 • ALB / NLB • Experience with: • AWS IAM • SCPs • Multi-account AWS Organizations • Proficiency in Infrastructure as Code (IaC): • Terraform • CloudFormation • AWS CDK • Familiarity with AWS security services: • GuardDuty • Security Hub • Inspector • Macie • AWS Certified Solutions Architect Associate or Professional preferred. • Scripting proficiency in: • Python • Bash • PowerShell • Experience with VPC Flow Log analysis and ENI-level troubleshooting. Role & Responsibilities: • Design and deploy AWS infrastructure including: • VPCs • Subnets • Security Groups • Route Tables • Transit Gateways • VPN / Direct Connect • Configure and manage AWS VPC: • Interface Endpoints • ALB / NLB • PrivateLink services • Manage AWS compute services: • EC2 • EKS • ECS • Lambda • Auto Scaling Groups • Implement and maintain AWS IAM: • Roles • Policies • Permission Boundaries • SCPs in multi-account environments • Configure: • VPC Flow Logs • CloudTrail • CloudWatch • AWS Security Hub • Build and manage IaC deployments using: • Terraform • AWS CloudFormation • AWS CDK • Support cross-cloud connectivity between AWS and Azure, including: • AMQP via Event Hub • S3 cross-account logging • Develop and maintain CI/CD pipelines for AWS workloads. • Troubleshoot: • VPC routing • ENI-level connectivity • Security Group / NACL issues • Maintain technical documentation, runbooks, and architecture diagrams. Nice to Have Skills: • AWS Certified DevOps Engineer or Advanced Networking Specialty. • Experience with AWS-to-Azure hybrid connectivity scenarios.