AWS NETWORK ENGINEER - (Must have active TS/SCI clearance)

NorthHill Technology; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

NorthHill Technology Resources LLC is seeking an AWS Network Engineer to join a mission-critical, security-sensitive project in Herndon, VA. The role requires active TS/SCI clearance and on-site work at approved facilities.

You will design and secure AWS networking, including VPCs, transit connectivity, and edge controls, collaborating with security and infrastructure engineers to ensure reliable, compliant cloud platforms for national security initiatives.

Qualifications

• 5+ years in network engineering with 3+ years in AWS networking.
• Hands-on with VPC routing, private connectivity, and security controls.
• Experience in highly regulated, isolated networks.
• Hands-on AWS cloud experience in controlled environments.

Responsibilities

• Design AWS VPC architectures, subnets, and routing.
• Implement and troubleshoot transit gateway, Direct Connect, VPN, and DNS.
• Configure segmentation using security groups, NACLs, and AWS firewall.
• Collaborate with security and infra teams on connectivity and change management.

Skills

AWS Networking

Network engineering

Security controls

Regulated networks

Education

AWS Advanced Networking Specialty or CCNP

Security+ or CISSP (where applicable)

Tools

VPC

Transit Gateway

Direct Connect

VPN

DNS

Job description

AWS NETWORK ENGINEER - (Must have active TS/SCI clearance)

• Herndon, VA
• Information Technology

One of our premier clients is seeking an experiencedAWS Network Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. This is a full-time position requireing an active Top Secret/SCI level clearance. Engineer the networks that make secure cloud platforms possible. You will solve complex routing, segmentation, and connectivity challenges across tightly controlled AWS environments where reliability and security are equally essential. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.

The program you will be supporting is a highly classified, mission-critical modernization initiative. Your roles will be to help build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies.

Key Responsibilities:

• Design AWS VPC architectures, subnets, routing, and private service connectivity.
• Implement and troubleshoot Transit Gateway, Direct Connect, VPN, and DNS integrations.
• Configure network segmentation and controls using security groups, NACLs, and AWS Network Firewall.
• Collaborate with security and infrastructure engineers on approved connectivity and change management.

Qualifications:

• 5+ years in network engineering, including 3+ years of AWS networking.
• Hands-on experience with VPC routing, private connectivity, and network security controls.
• Experience supporting complex, isolated, or highly regulated networks.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Preferred Qualifications:

• AWS Advanced Networking Specialty or CCNP.
• Experience with multi-region AWS connectivity and tightly controlled network boundaries.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

One of our premier clients is seeking an experiencedAWS Network Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. This is a full-time position requireing an active Top Secret/SCI level clearance. Engineer the networks that make secure cloud platforms possible. You will solve complex routing, segmentation, and connectivity challenges across tightly controlled AWS environments where reliability and security are equally essential. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.

The program you will be supporting is a highly classified, mission-critical modernization initiative. Your roles will be to help build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies.

Key Responsibilities:

• Design AWS VPC architectures, subnets, routing, and private service connectivity.
• Implement and troubleshoot Transit Gateway, Direct Connect, VPN, and DNS integrations.
• Configure network segmentation and controls using security groups, NACLs, and AWS Network Firewall.
• Collaborate with security and infrastructure engineers on approved connectivity and change management.

Qualifications:

• 5+ years in network engineering, including 3+ years of AWS networking.
• Hands-on experience with VPC routing, private connectivity, and network security controls.
• Experience supporting complex, isolated, or highly regulated networks.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Preferred Qualifications:

• AWS Advanced Networking Specialty or CCNP.
• Experience with multi-region AWS connectivity and tightly controlled network boundaries.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Requirements:

• Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of one of the following 4 approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• Regular on-site work in an approved secure facility and occasional work at authorized customer facilities may be required. This is not a remote position.
• Full-time position, on-site
• Please note that pursuant to a government contract, this specific position requires U.S. citizenship status