Networking SME

VeeRteq Solutions Inc.; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

VeeRteq Solutions Inc. seeks a Networking SME to drive hybrid cloud networking architectures spanning on-premises data centers and AWS across VPC Lattice service networks. Immediate start with a till-year-end duration and potential extension.

The role focuses on building scalable, observable networks and implementing secure data perimeters. Candidates should demonstrate hands-on experience with VPC Lattice, CloudWAN segments, DX gateway patterns, PrivateLink scale, route filtering, and IaC using

Qualifications

• Experience with VPC Lattice, Resource Configs and service networks.
• Hands-on networking across AWS and on-prem, including CloudWAN, Direct Connect and PrivateLink.
• Ability to design IAM data perimeter and governance for cloud networks.

Skills

VPC Lattice

AWS networking

CloudWAN

Direct Connect

PrivateLink

Route 53 Resolver

IAM data perimeter design

CDK/Python/CFT

network observability

Tools

CDK

Python

CloudFormation

Job description

Role: Networking SME
Start: Immediate
Duration: Till End of this year. (Possible extension)

At least one of the below experience is required in addition to the above requirements:

Strong VPC Lattice experience

Network observability - Generate and collect cloud network metrics (latency, round-trip time etc.) for traffic flowing between on-premises data centers and AWS, as well as between cloud providers. Experience in creating those metrics in a centralized but consumable way by workloads

What we need SMEs in:

VPC Lattice (Resource Configs, Resource Gateway, service networks, service network VPC endpoints for hybrid access), AWS CloudWAN (segments, route filtering, advanced routing, TGW peering), Direct Connect (VIF automation, VGW direct attachment, DX Gateway patterns, 100G dedicated circuits), PrivateLink (interface endpoints at scale, endpoint policies with org-level condition keys like aws:PrincipalOrgID/aws:ResourceOrgPaths, transit hub VPC patterns), Route 53 Resolver (inbound/outbound endpoints, conditional forwarding for on-prem DNS zones), IAM data perimeter design (replacing traditional firewall allow/deny with native AWS constructs), and CDK/Python/CFT (infrastructure-as-code for repeatable network provisioning patterns, Lambda-based lifecycle automation).

Customer network architecture basics:

Cloud WAN ("CloudWAN segments") for global connectivity - FastTrack (prod), SkyPath (proxy), SkyTransit (hybrid), Workload segments

Shared VPCs (legacy "FastTrack" model) with Customer-routable + cloud-routable CIDR - its being superseded by...

Customer-Managed VPCs (new world) - individual per-workload VPCs connected via VPC Lattice service networks. All new migration work goes here.

"On-Ramp" = DX connection points (Equinix Ashburn, CoreSite Reston, Equinix Slough/Manchester). Connected to CloudWAN.

SkyPath = TLS proxy fleet for cross-zone/cross-segment traffic. InfoSec-mandated but Mike Ahern (key stakeholder) is actively trying to bypass it for migration flows.

On-prem network is flat; firewall between on-prem and cloud is IP-based with specific port openings.