AWS Network Architect

Cognizant; Dover (DE); On-site; USD 131,000 - 161,000; Full time

Job summary

Cognizant is seeking a Cloud Architect for a full-time remote opportunity in the United States. Applicants must be located and authorized to work in the US. The role emphasizes designing scalable network architectures and optimizing inter-VPC connectivity.

You'll design multi-VPC layouts, implement hub-and-spoke topology with Transit Gateway and Cloud WAN, and configure Direct Connect, VPN failover, and private DNS. The position requires expert AWS networking knowledge and CDK proficiency.

Qualifications

• Expert-level experience in designing and implementing AWS networking architectures.
• Proficient in multi-account networking, Transit Gateway, VPC, and security controls.

Responsibilities

• Design multi-VPC architectures with optimized CIDR allocation.
• Implement hub-and-spoke topology using Transit Gateway and Cloud WAN.
• Configure hybrid connectivity with Direct Connect and VPN failover.
• Engineer HA NAT Gateway and egress routing with AZ failover.
• Implement Route53 configurations including private hosted zones.
• Design cross-region connectivity with TGW peering and inter-region routing.
• Enforce least privilege with NACLs, SGs, and firewall layers.
• Create Network Architecture Diagrams showing route flows and traffic segmentation.

Skills

AWS Networking

Cloud Architecture

Tools

AWS CDK

Job description

Cognizant is seeking a Cloud Architect for a full-time remote opportunity. Applicants must be located and authorized to work in the US. Cognizant will not offer visa sponsorships now or anytime in the future.

Responsibilities:

• Design multi-VPC architectures with optimized CIDR allocation to avoid overlap across accounts/regions.
• Implement hub-and-spoke topology using AWS Transit Gateway, Cloud WAN with route segmentation and propagation controls.
• Configure hybrid connectivity using Direct Connect (private VIFs, LAGs) and VPN failover patterns.
• Engineer high-availability NAT Gateway and egress routing architectures with AZ-level failover.
• Implement advanced Route53 configurations (split-horizon DNS, private hosted zones, conditional forwarding).
• Design and configure inter-VPC connectivity using VPC Peering vs Transit Gateway based on scale and routing needs.
• Implement Private Link (Interface & Gateway Endpoints) for secure connectivity without internet exposure.
• Configure AWS Network Firewall policies, rule groups, and inspection VPC architectures.
• Design multi-account networking using AWS Organizations and shared services VPC patterns.
• Troubleshoot latency issues using VPC Flow Logs, packet path analysis, and Reachability Analyzer.
• Analyze traffic patterns using Flow Logs and Traffic Mirroring for deep packet inspection scenarios.
• Implement cross-region connectivity strategies using TGW peering and inter-region routing controls.
• Enforce network security controls via NACLs, Security Groups, and firewall layers with least privilege design.
• Build detailed Network Architecture Diagrams including route flows, failover paths, and traffic segmentation models.

What you'll need to succeed:

• Expert level experience with AWS Networking related Services and CDK.

The salary range for this role is between $131,000 and $ 161000 depending on skills and qualifications of the candidate. Applications will be accepted till 8/15/2026.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.