Remote Senior AWS Networking & Observability Architect

Cognizant; Montpelier (VT); On-site; USD 115,000 - 190,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and PTO

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking an experienced Principal AWS Cloud Architect to design and optimize scalable, secure AWS networking, monitoring, logging, and observability across multi-account, multi-region environments.

Responsibilities include building multi-VPC architectures, hub-and-spoke designs, Direct Connect, VPC Lattice, PrivateLink, Cloud WAN, and comprehensive observability with CloudWatch, X-Ray, and CloudTrail, plus ensuring PCI DSS/SOC 2/GDPR/CIS compliance.

Qualifications

• Extensive AWS cloud infrastructure and networking expertise.
• Hands-on experience designing enterprise-scale AWS networking solutions.
• Strong knowledge of DNS, routing, firewalls, VPNs, and hybrid connectivity.

Responsibilities

• Design multi-VPC architectures across AWS accounts/regions.
• Implement hub-and-spoke architectures with Transit Gateway and Cloud WAN.
• Configure hybrid connectivity (Direct Connect, VPN failover).
• Engineer NAT Gateway and egress routing.
• Design Route 53 with private zones and conditional forwarding.
• Develop centralized observability with CloudWatch, X-Ray, CloudTrail.

Skills

AWS X-Ray

CloudWatch

CloudTrail

Route 53

VPC Flow Logs

Direct Connect

VPC Lattice

Cloud WAN

Transit Gateway

AWS Network Firewall

AWS PrivateLink

AWS Organizations

Splunk

Datadog

Prometheus

Grafana

Education

12-15+ years IT experience

Tools

Splunk

Datadog

Prometheus

Grafana

Job description

Cognizant is seeking an experienced Principal AWS Cloud Architect to design and optimize scalable, secure AWS networking, monitoring, logging, and observability across multi-account, multi-region environments.

Responsibilities include building multi-VPC architectures, hub-and-spoke designs, Direct Connect, VPC Lattice, PrivateLink, Cloud WAN, and comprehensive observability with CloudWatch, X-Ray, and CloudTrail, plus ensuring PCI DSS/SOC 2/GDPR/CIS compliance.