AWS Cloud Architect

The Brixton Group; New York (NY); Remote; USD 138,000 - 152,000; Full time

Job summary

The Brixton Group is seeking an experienced AWS networking engineer to design and operate secure networking for large-scale hybrid cloud environments. You will implement multi-region architectures, cross-VPC connectivity, and service networking using AWS CDK (TypeScript) and Terraform.

This remote role offers a 12+ month engagement with competitive hourly compensation and a focus on modernization and automation across distributed teams.

Qualifications

• Subject matter expertise in AWS networking (S 300-400 level).
• Enterprise-scale AWS network architecture experience.
• Deep knowledge of Amazon VPC, DNS, monitoring, and connectivity troubleshooting.
• Experience connecting on-premises environments to AWS.
• Hybrid cloud network architecture design and performance optimization.
• Hands-on with AWS PrivateLink, Amazon VPC Lattice, cross-VPC connectivity, and hybrid architectures.
• Proficiency in AWS CDK with TypeScript; Terraform acceptable with quick CDK adoption.
• Ability to design reusable CDK constructs and review infra code for best practices.

Responsibilities

• Design and manage enterprise-scale AWS networking architectures.
• Build secure hybrid connectivity between AWS and on-premises environments.
• Implement cross-VPC and service-to-service networking architectures.
• Troubleshoot network performance, latency, and connectivity issues.
• Develop reusable AWS CDK infrastructure components and deployment patterns.
• Establish multi-region networking and resiliency architectures.
• Create architecture documentation, ADRs, and implementation guidance.
• Support application teams during migration and modernization initiatives.

Skills

AWS networking

VPC & DNS

Network troubleshooting

Hybrid cloud design

CDK TypeScript

Terraform familiarity

Architecture review

Tools

AWS CDK

Terraform

Job description

**Duration: 12 + months

Compensation: $100-110hr W2

Location: Remote

Summary:

The role involves designing, implementing, and operating secure AWS networking solutions for large-scale hybrid cloud environments. Focus areas include network connectivity, multi-region architecture, service networking, infrastructure automation, and cloud modernization initiatives.

Responsibilities:

• Design and manage enterprise-scale AWS networking architectures.
• Build secure hybrid connectivity between AWS and on-premises environments.
• Implement cross-VPC and service-to-service networking architectures.
• Troubleshoot network performance, latency, and connectivity issues.
• Develop reusable AWS CDK infrastructure components and deployment patterns.
• Establish multi-region networking and resiliency architectures.
• Create architecture documentation, ADRs, and implementation guidance.
• Support application teams during migration and modernization initiatives.

Requirements:

• AWS networking subject matter expertise (Level 300-400).
• Enterprise-scale AWS network architecture experience.
• Deep understanding of Amazon VPC, DNS, network monitoring, and connectivity troubleshooting.
• Experience connecting on-premises environments to AWS.
• Hybrid cloud network architecture design and performance optimization.
• Hands-on implementation experience with AWS PrivateLink, Amazon VPC Lattice, cross-VPC connectivity patterns, and hybrid connectivity architectures.
• Proficiency in AWS CDK with TypeScript preferred; Terraform acceptable with quick CDK adoption.
• Ability to design reusable CDK construct architectures and review infrastructure code for best practices.

Preferred Qualifications:

• Experience with proxy architectures, including explicit and transparent proxies.
• Working knowledge of Amazon ECS Fargate, Elastic Load Balancing (ELB), Amazon EC2, Amazon S3, AWS IAM, Amazon VPC, Amazon VPC Lattice, Amazon SQS, Amazon RDS, Amazon DynamoDB, Amazon Aurora PostgreSQL, AWS Lambda, Amazon API Gateway, and AWS KMS.
• Experience with active-active and active-passive architectures, cross-region resiliency, and event-driven multi-region architectures.
• Experience creating Architecture Decision Records (ADRs), target-state architecture diagrams, blueprint documentation, and technical implementation guidance.
• Familiarity with Jira story management, sprint participation, and agile delivery processes.
• Advanced networking experience with firewalls, AWS Transit Gateway, and AWS Cloud WAN.
• Experience with VPC Lattice service networks, producer/consumer patterns, and service-to-service connectivity.
• Knowledge of ECS Fargate task definitions, service architecture, auto-scaling, load balancer integration, service discovery, and migration strategies.