AWS Network Engineer

Karachi, Karachi, Pakistan
Full Time
Experienced

Key Responsibilities

  • Design and implement AWS network architectures, including Hub-and-Spoke, Shared Services, and Landing Zone models

  • Design, configure, and manage Amazon VPC environments, including CIDR allocation, subnetting, route tables, and network segmentation

  • Implement centralized routing and security using AWS Transit Gateway

  • Configure and manage VPC Peering, VPC Endpoints (PrivateLink), Internet Gateways, and NAT Gateways

  • Design and support hybrid connectivity solutions, including Site-to-Site VPN, Client VPN, and AWS Direct Connect

  • Automate AWS network infrastructure using Terraform modules and Infrastructure as Code (IaC) best practices

  • Design, deploy, and manage firewall solutions, including AWS Network Firewall, Security Groups, and Network ACLs

  • Configure and troubleshoot routing protocols such as BGP and static routing within AWS environments

  • Manage and support switching technologies, including VLANs, trunking, and Layer 2/Layer 3 switching

  • Troubleshoot complex network issues involving routing, switching, firewall policies, latency, and packet flow

  • Implement and manage AWS load balancing solutions, including ALB, NLB, and Gateway Load Balancer (GWLB)

  • Monitor and optimize network performance using VPC Flow Logs, CloudWatch, and other monitoring tools

  • Maintain up-to-date network diagrams, architecture documentation, and Terraform repositories

  • Architect and manage multi-account and multi-region AWS environments using AWS Organizations and Control Tower (good to have)


Technical Stack & Tools

  • Strong expertise in AWS Networking Architecture (must have)

  • Hands-on experience with Terraform for AWS network automation (must have)

  • In-depth knowledge of routing concepts and protocols (BGP, static routing) (must have)

  • Strong experience with switching technologies (VLANs, STP, Layer 2/Layer 3 switching)

  • Solid experience with firewalls and AWS network security controls

  • Deep understanding of TCP/IP, DNS, DHCP, subnetting, and network segmentation


Preferred Qualifications

  • AWS Certified Advanced Networking – Specialty (good to have)

  • Experience with AWS Landing Zone / Control Tower (good to have)

  • Knowledge of Zero Trust architecture and defense-in-depth security models

  • Familiarity with AWS networking and DevOps best practices (good to have)

Share

Apply for this position

Required*
We've received your resume. Click here to update it.
Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

Human Check*