Remote AWS Network Architect: Cloud Networking Leader

Cognizant; Honolulu (HI); Remote; USD 131,000 - 161,000; Full time

Job summary

Cognizant is seeking a Cloud Architect for a full-time remote opportunity in the United States. You will design and optimize enterprise AWS networks across multiple accounts, ensuring secure, scalable connectivity.

The role requires expert-level AWS networking experience and proficiency with CDK. You will implement Transit Gateway, Direct Connect, PrivateLink, Route53, and multi-account patterns to support global workloads.

Qualifications

• Expert level experience with AWS Networking related Services and CDK.

Responsibilities

• Design multi-VPC architectures with optimized CIDR allocation to avoid overlap.
• Implement hub-and-spoke topology using AWS Transit Gateway and route segmentation.
• Configure hybrid connectivity with Direct Connect and VPN failover.
• Engineer HA NAT Gateway and egress routing with AZ-level failover.
• Implement Route53 configurations including private hosted zones.
• Design inter-VPC connectivity using VPC Peering vs Transit Gateway.
• Implement Private Link for secure connectivity without internet exposure.
• Configure AWS Network Firewall policies and inspection VPCs.
• Design multi-account networking using AWS Organizations and shared services VPCs.
• Troubleshoot latency using VPC Flow Logs and Reachability Analyzer.
• Analyze traffic with Flow Logs and Traffic Mirroring.
• Cross-region connectivity using TGW peering and inter-region routing controls.
• Enforce security with NACLs, SGs and least privilege design.
• Build detailed Network Architecture Diagrams with route flows and failover paths.

Skills

AWS Networking

CDK

Job description

Cognizant is seeking a Cloud Architect for a full-time remote opportunity in the United States. You will design and optimize enterprise AWS networks across multiple accounts, ensuring secure, scalable connectivity.

The role requires expert-level AWS networking experience and proficiency with CDK. You will implement Transit Gateway, Direct Connect, PrivateLink, Route53, and multi-account patterns to support global workloads.