Principal Network Engineer - AWS

CrackaJack Digital Solutions LLC.; Denver (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading company in Denver is seeking a Principal Networking Engineer specializing in AWS cloud networking. The role involves designing and optimizing global network infrastructure, leading automation initiatives, and ensuring high security and performance. Ideal candidates will have extensive experience with AWS networking services and strong leadership skills.

Qualifications

• 10+ years of experience in network engineering with a focus on AWS.
• Deep expertise in AWS networking services and routing protocols.

Responsibilities

• Design and optimize cloud networking solutions in AWS.
• Lead network automation initiatives using Terraform and Python.
• Collaborate with DevOps and Security teams for scalable architectures.

Skills

Cloud Networking

Problem Solving

Communication

Tools

Terraform

CloudFormation

Python

Ansible

AWS CloudWatch

Wireshark

NetFlow

ThousandEyes

Job description

Job Title: Principal Networking Engineer - AWS

Location: Denver, CO

About the Role:
We are seeking a Principal Networking Engineer with extensive experience in AWS cloud networking to lead the design, implementation, and optimization of our global network infrastructure. This role requires deep expertise in cloud networking architectures, hybrid cloud connectivity, and large-scale network operations. The ideal candidate will drive strategic initiatives, ensure high availability, security, and performance, and serve as a thought leader in cloud networking best practices.

Key Responsibilities:

• Design, implement, and optimize cloud networking solutions in AWS, including VPCs, Transit Gateway, Direct Connect, PrivateLink, and AWS Networking Firewall.
• Architect hybrid cloud and multi-cloud networking solutions, integrating on-premises and cloud environments securely and efficiently.
• Lead network automation initiatives using Terraform, CloudFormation, Python, or Ansible to streamline deployments and improve operational efficiency.
• Ensure network security and compliance by implementing best practices, including zero-trust networking, encryption, and security groups/NACLs management.
• Troubleshoot complex networking issues, ensuring minimal downtime and optimal performance through monitoring, logging, and observability tools (e.g., AWS CloudWatch, VPC Flow Logs, ELK, or Prometheus).
• Collaborate with DevOps, Security, and Software Engineering teams to design and maintain scalable and resilient network architectures.
• Evaluate and implement new networking technologies, staying ahead of industry trends and AWS networking advancements.
• Mentor junior engineers and contribute to a culture of continuous learning and technical excellence.

Required Qualifications:

• 10+ years of experience in network engineering, with a strong focus on cloud networking (AWS preferred).
• Deep expertise in AWS networking services (VPC, Transit Gateway, Direct Connect, PrivateLink, ALB/NLB, Route 53, Global Accelerator).
• Strong knowledge of routing protocols (BGP, OSPF, EIGRP) and network security principles (firewalls, VPNs, IPS/IDS).
• Proficiency in network automation and Infrastructure as Code (IaC) using Terraform, CloudFormation, Python, or Ansible.
• Experience with hybrid cloud connectivity, including MPLS, SD-WAN, and cloud interconnects. ● Hands-on experience with monitoring and troubleshooting tools such as AWS CloudWatch, Wireshark, NetFlow, and ThousandEyes.
• Strong problem-solving skills and the ability to troubleshoot complex, high-impact network issues.
• Excellent communication and leadership skills, with experience mentoring teams and leading cross-functional initiatives.

Preferred Qualifications:

• AWS Certified Advanced Networking – Specialty or equivalent certification.
• Experience with multi-cloud networking (Azure, GCP) and SDN architectures.
• Familiarity with Kubernetes networking (CNI plugins, Istio, service mesh).
• Experience with DDoS mitigation and security tools such as AWS Shield, WAF, and NACLs.