Senior AWS Network Architect – Hybrid Cloud & Security

Tata Consultancy Services; Irvine (CA); On-site; USD 100,000 - 140,000; Full time

Job summary

Tata Consultancy Services is seeking a Network Architect to design enterprise-grade AWS network architectures, including multi-account structures and hybrid connectivity across global sites. The role requires expertise in VPCs, Transit Gateway, Direct Connect, and security frameworks with zero-trust principles.

Responsibilities include leading governance for IPAM/DNS/load balancing, automation with Terraform/CloudFormation, and monitoring with CloudWatch and VPC Flow Logs.

Qualifications

• 8+ years in enterprise networking, with at least 5 years specifically focused on AWS Cloud Architecture.

Responsibilities

• Architectural Strategy: Design and document enterprise-grade AWS network architectures, including Multi-Account structures using AWS Control Tower and Organizations.
• Hybrid Connectivity: Implement complex hybrid patterns using AWS Direct Connect, Transit Gateway, and Site-to-Site VPN to link global sites with AWS VPCs.
• Security & Compliance: Lead the design of Zero-Trust network frameworks, implementing AWS Network Firewall, WAF, and micro-segmentation through Security Groups and NACLs.
• Automation (IaC): Standardize infrastructure deployment using Terraform or CloudFormation to eliminate manual configuration and ensure reproducibility.
• Network Governance: Establish and enforce standards for IP address management (IPAM), DNS (Route 53), and load balancing (ALB/NLB/GWLB).
• Performance & Observability: Design monitoring solutions using Amazon CloudWatch, VPC Flow Logs, and Traffic Mirroring to proactively identify and resolve bottlenecks.
• Cost Optimization: Analyze data transfer patterns and architect solutions to minimize AWS egress costs and resource waste.

Skills

AWS Networking

Routing Protocols

Security Tools

Automation

Legacy Integration

Tools

Terraform

CloudFormation

Job description

Tata Consultancy Services is seeking a Network Architect to design enterprise-grade AWS network architectures, including multi-account structures and hybrid connectivity across global sites. The role requires expertise in VPCs, Transit Gateway, Direct Connect, and security frameworks with zero-trust principles.

Responsibilities include leading governance for IPAM/DNS/load balancing, automation with Terraform/CloudFormation, and monitoring with CloudWatch and VPC Flow Logs.