AWS Network Engineer (AL-FNC251201 002/01)

Xcellink Pte Ltd; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Xcellink Pte Ltd is seeking an AWS Network Engineer to design, implement, and support secure, scalable cloud network infrastructure within the client’s AWS environment.

You will collaborate with project teams, system integrators, and cybersecurity staff to ensure reliable, secure, and compliant networking for mission-critical applications, including VPCs, Direct Connect, VPNs, and load balancing.

Qualifications

• Diploma or Bachelor’s degree in Computer Science, Information Systems, or related field.
• 1+ years of experience in network engineering, including managing AWS or hybrid cloud networks.
• Strong understanding of TCP/IP, HTTP/S, DNS, DHCP, routing protocols (BGP), VPNs, and load balancing.
• Proficiency with AWS networking services such as VPC, Transit Gateway, PrivateLink, Route 53, Direct Connect, Load Balancers and Network Firewall.
• Expertise in network segmentation, traffic filtering, and firewall policy management to enforce security.
• Proficiency with network architectures, optimisation and troubleshooting
• Hands‑on experience with IaC and automation tools e.g. Terraform, CloudFormation and Ansible.
• Familiarity with Zero Trust network design principles.
• Excellent analytical and communication skills with the ability to work collaboratively across service providers and project teams.

Responsibilities

• Design, deploy, and maintain AWS VPC environments including subnets, route tables, security groups, and Transit Gateways.
• Configure, manage and maintain hybrid cloud connectivity (Direct Connect, VPN, Transit Gateway) between on-premises data centres and AWS.
• Configure and manage DNS and DHCP network services.
• Configure and manage Network Load Balancing and Traffic Management using AWS ELB, NLB, ALB, CloudFront and Nginx.
• Implement network security controls to comply with client policies and protect data integrity.
• Lead incident response efforts, collaborating with vendors and project teams.
• Provide technical network support for internet-facing applications; assist with provisioning and troubleshooting.
• Collaborate with cloud architects, cybersecurity teams, and DevOps to design secure, resilient topologies.
• Implement IaC and automation using Terraform, Ansible, and CloudFormation.
• Troubleshoot and optimise network performance using AWS CloudWatch, VPC Flow Logs, CloudTrail, and other tools.
• Maintain accurate network documentation and topology diagrams in line with change management processes.

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

Ansible

AWS Direct Connect

Route 53

Palo Alto Firewall

Nginx

Job description

We are seeking a dedicated AWS Network Engineer to design, implement, and support secure, scalable, and high-availability cloud network infrastructure within the client’s environment.

This role involves working closely with project teams, system integrators, vendors and internal IT and cybersecurity teams to ensure the reliability, security, and compliance of AWS network solutions that support the client’s digital services and mission-critical systems.

You will play a key role in strengthening the client’s infrastructure through robust cloud connectivity and secure network design.

Responsibilities

• Design, deploy, and maintain AWS Virtual Private Cloud (VPC) environments including subnets, route tables, security groups, network access control lists, Transit Gateways, Route 53 (DNS) and PrivateLink in alignment with the client’s standards and policies.
• Configure, manage and maintain hybrid cloud connectivity (e.g., AWS Direct Connect, Gateways, Site-to-Site VPN, Transit Gateway) between on-premises data centres and AWS environments.
• Configure and manage DNS and DHCP network services
• Configure and manage Network Load Balancing and TraIic Management using AWS ELB, NLB, ALB, CloudFront and Nginx to ensure traTic optimization, latency reduction, and high availability for distributed applications
• Implement network security controls to comply with the client’s security guidelines and policies, ensuring confidentiality and integrity of the client’s data and systems.
• Implement and administer Firewalls and Security Appliances e.g. Palo Alto Firewalls and VPN infrastructure and cloud-native firewalls like AWS WAF.
• Lead incident response eTorts, collaborating closely with vendors and project teams to ensure timely resolution.
• Provide advice and technical network support for internet-facing applications, ensuring smooth deployment and resolving pre- and post-implementation issues.
• Collaborate with cloud architects, cybersecurity teams, and DevOps engineers to design secure and resilient cloud network topologies.
• Implement network automation and Infrastructure-as-Code (IaC) using tools such as Terraform, Ansible, AWS CloudFormation.
• Troubleshoot and optimise network performance using AWS CloudWatch, VPC Flow Logs, CloudTrail, and other monitoring tools.
• Provide technical support for Windows and Linux EC2 servers, assisting with provisioning, configuration, scripting and troubleshooting.
• Maintain accurate network documentation, topology diagrams, operational procedures and best practices in compliance with audit and change management processes.
• Stay up to date with AWS networking advancements, GovTech cloud policies, and cybersecurity directives to propose continuous improvements.

Requirements

• Diploma or Bachelor’s degree in Computer Science, Information Systems, or related field.
• 1 or more years of experience in network engineering, including managing AWS or hybrid cloud networks.
• Strong understanding of TCP/IP, HTTP/S, DNS, DHCP, routing protocols (BGP), VPNs, and load balancing.
• Proficiency with AWS networking services such as VPC, Transit Gateway, PrivateLink, Route 53, Direct Connect, Load Balancers and Network Firewall.
• Expertise in network segmentation, traIic filtering, and firewall policy management to enforce security.
• Proficiency with network architectures, optimisation and troubleshooting
• Hands‑on experience with IaC and automation tools e.g. Terraform, CloudFormation and Ansible.
• Familiarity with Zero Trust network design principles.
• Excellent analytical and communication skills with the ability to work collaboratively across service providers and project teams.

Preferred skills and qualifications

• AWS Certified Advanced Networking – Specialty or AWS Certified Solutions Architect – Associate/Professional.
• Palo Alto Networks Certified Next‑Generation Firewall Engineer
• Experience with security and compliance frameworks relevant to government and regulated environments.