Cloud Network Engineer (AWS)

XCELLINK PTE. LTD.; Singapore; On-site; SGD 55,000 - 75,000; Full time

Job summary

A leading tech consultancy firm seeks an AWS Network Engineer in Singapore to design and maintain secure cloud network infrastructures. The role includes working closely with project teams and vendors to ensure compliance and reliability in AWS environments. Key responsibilities involve configuring hybrid cloud connectivity, implementing network security controls, and using automation tools like Terraform and Ansible. A background in computer science and AWS services is required. This position offers opportunities to work on cutting-edge networking projects.

Qualifications

• 1+ years of experience in network engineering managing AWS or hybrid cloud networks.
• Strong understanding of routing protocols and load balancing.
• Proficiency in network optimization and security.

Responsibilities

• Design and maintain AWS VPC environments aligning with client standards.
• Configure hybrid cloud connectivity between on-premises and AWS environments.
• Implement security controls to ensure data confidentiality.

Skills

AWS networking services

Network troubleshooting

IaC and automation tools

TCP/IP

Collaboration across teams

Education

Diploma or Bachelor’s degree in Computer Science or related field

Tools

Terraform

AWS CloudFormation

Ansible

Palo Alto Firewalls

Job description

We are seeking a dedicated AWS Network Engineer to design, implement, and support secure, scalable, and high-availability cloud network infrastructure within the client’s environment.

This role involves working closely with project teams, system integrators, vendors and internal IT and cybersecurity teams to ensure the reliability, security, and compliance of AWS network solutions that support the client’s digital services and mission-critical systems.

You will play a key role in strengthening the client’s infrastructure through robust cloud connectivity and secure network design.

Responsibilities

• Design, deploy, and maintain AWS Virtual Private Cloud (VPC) environments including subnets, route tables, security groups, network access control lists, Transit Gateways, Route 53 (DNS) and PrivateLink in alignment with the client’s standards and policies.
• Configure, manage and maintain hybrid cloud connectivity (e.g., AWS Direct Connect, Gateways, Site-to-Site VPN, Transit Gateway) between on-premises data centres and AWS environments.
• Configure and manage DNS and DHCP network services
• Configure and manage Network Load Balancing and TraIic Management using AWS ELB, NLB, ALB, CloudFront and Nginx to ensure traTic optimization, latency reduction, and high availability for distributed applications
• Implement network security controls to comply with the client’s security guidelines and policies, ensuring confidentiality and integrity of the client’s data and systems.
• Implement and administer Firewalls and Security Appliances e.g. Palo Alto Firewalls and VPN infrastructure and cloud-native firewalls like AWS WAF.
• Lead incident response eTorts, collaborating closely with vendors and project teams to ensure timely resolution.
• Provide advice and technical network support for internet-facing applications, ensuring smooth deployment and resolving pre- and post-implementation issues.
• Collaborate with cloud architects, cybersecurity teams, and DevOps engineers to design secure and resilient cloud network topologies.
• Implement network automation and Infrastructure-as-Code (IaC) using tools such as Terraform, Ansible, AWS CloudFormation.
• Troubleshoot and optimize network performance using AWS CloudWatch, VPC Flow Logs, CloudTrail, and other monitoring tools.
• Provide technical support for Windows and Linux EC2 servers, assisting with provisioning, configuration, scripting and troubleshooting.
• Maintain accurate network documentation, topology diagrams, operational procedures and best practices in compliance with audit and change management processes.
• Stay up to date with AWS networking advancements, GovTech cloud policies, and cybersecurity directives to propose continuous improvements.

Required skills and qualifications

• Diploma or Bachelor’s degree in Computer Science, Information Systems, or related field.
• 1 or more years of experience in network engineering, including managing AWS or hybrid cloud networks.
• Strong understanding of TCP/IP, HTTP/S, DNS, DHCP, routing protocols (BGP), VPNs, and load balancing.
• Proficiency with AWS networking services such as VPC, Transit Gateway, PrivateLink, Route 53, Direct Connect, Load Balancers and Network Firewall.
• Expertise in network segmentation, traIic filtering, and firewall policy management to enforce security.
• Proficiency with network architectures, optimisation and troubleshooting
• Hands-on experience with IaC and automation tools e.g. Terraform, CloudFormation and Ansible.
• Familiarity with Zero Trust network design principles.
• Excellent analytical and communication skills with the ability to work collaboratively across service providers and project teams.

Preferred skills and qualifications

• AWS Certified Advanced Networking – Specialty or AWS Certified Solutions Architect – Associate/Professional.
• Palo Alto Networks Certified Next-Generation Firewall Engineer
• Experience with security and compliance frameworks relevant to government and regulated environments.