AWS Network Security Engineer

Cyber Security training courses; Greater London; Hybrid; GBP 95,000 - 125,000; Full time

Job summary

Cyber Security training courses is seeking a Principal AWS Network Security Engineer to design and deliver secure, scalable cloud networking solutions. The role focuses on AWS network security architecture, hybrid connectivity, and enterprise-scale environments.

Responsibilities include building secure VPCs, Transit Gateway, and private networking, plus integrating AWS logs into SIEM systems and automating with Terraform/CloudFormation. Immediate start in a mostly remote, London-traveling role.

Qualifications

• Experience designing secure AWS VPC architectures (multi-region, segmented).
• Experience with Transit Gateway, Cloud WAN, and private networking.
• Experience with AWS security services: GuardDuty, Security Hub, WAF, Shield.
• Experience with VPN and Direct Connect for high availability.
• Experience integrating AWS logs into SIEM (Splunk, Sentinel).
• Infrastructure as Code with Terraform or CloudFormation.

Responsibilities

• Design and implement secure AWS VPC architectures (multi-region, segmented).
• Build and manage Transit Gateway, Cloud WAN, and private networking.
• Implement AWS security services (GuardDuty, Security Hub, WAF, Shield).
• Design hybrid connectivity using VPN and Direct Connect with high availability.
• Integrate AWS logs and telemetry into SIEM platforms (Splunk, Sentinel).
• Deliver automation using Terraform, CloudFormation, and Lambda.
• Ensure secure, compliant, and observable cloud environments.

Skills

VPC architecture

AWS security services

Hybrid connectivity

Zero Trust

SIEM integration

Terraform / CloudFormation

Python / Bash scripting

Enterprise firewall exposure

Tools

Terraform

CloudFormation

Lambda

Job description

Location: Mostly remote with occasional travel to London

Contract length: 6 months (high possibility for extension)

Start Date: Immediately

Daily rate - £595 (inside IR35)

Sponsorship is not available for this role

We are hiring a Principal AWS Network Security Engineer to design and deliver secure, scalable cloud networking solutions. This role focuses on AWS network security architecture, hybrid connectivity, and enterprise-scale environments.

Key Responsibilities

• Design and implement secure AWS VPC architectures (multi-region, segmented)
• Build and manage Transit Gateway, Cloud WAN, and private networking
• Implement AWS security services (GuardDuty, Security Hub, WAF, Shield)
• Design hybrid connectivity using VPN and Direct Connect with high availability
• Integrate AWS logs and telemetry into SIEM platforms (e.g. Splunk, Sentinel)
• Deliver automation using Terraform, CloudFormation, and Lambda
• Ensure secure, compliant, and observable cloud environments

Required Skillset

• Strong AWS networking experience: VPC, routing, segmentation, private endpoints
• AWS security services: GuardDuty, Security Hub, WAF, Shield, IAM
• Hybrid connectivity: VPN, Direct Connect, BGP
• Network security fundamentals: firewalls, zero-trust, micro-segmentation
• SIEM and monitoring: CloudWatch, VPC Flow Logs, Splunk or similar
• Infrastructure as Code: Terraform or CloudFormation
• Scripting/automation: Python, Bash, or similar
• Enterprise firewall exposure: Palo Alto, Check Point or Fortinet