Cloud Network Engineer (AWS)

About the role

AMGEN Capability Center Portugal, based in Lisbon, is looking for a highly experienced Cloud Network Engineer to join its Cloud Networking team. The role designs, implements, operates and continuously improves a large-scale enterprise AWS network environment, delivering secure, resilient, scalable and highly available cloud networking across a multi-account, multi-region setup. It works closely with Cloud Platform, Enterprise Network, Cybersecurity, Infrastructure and application engineering teams.

Key responsibilities

• Design, implement and support cloud network architectures on AWS (preferred) or other major clouds, covering VPC, Transit Gateway, route tables, VPC peering, PrivateLink, VPC endpoints and Route 53
• Build secure, scalable multi-account, multi-region and hybrid-cloud networking patterns, and develop network standards and reusable architectures
• Design and troubleshoot hybrid connectivity, including Site-to-Site VPN, BGP, route propagation and Direct Connect (preferred)
• Implement and support DNS services (Route 53 or equivalents), private hosted zones and hybrid DNS architectures
• Work with security teams on inspected traffic flows, security groups, NACLs, endpoint controls and least-privilege designs
• Provide senior troubleshooting for production incidents, take part in incident response, root-cause analysis and preventive engineering
• Contribute to capacity planning, disaster recovery and resilience, and reduce key-person dependency through documentation and knowledge sharing

Required profile

• Bachelor's degree in Computer Science, IT, Engineering or a related field, with 3+ years of relevant experience, or an equivalent combination
• Hands-on experience designing and operating AWS networking infrastructure in enterprise environments
• Experience troubleshooting complex hybrid-cloud connectivity issues and working across multiple teams, accounts and platforms
• Ability to take part in production support and critical incident response

Required skills

• AWS networking: VPC, Transit Gateway, route tables, Direct Connect, Site-to-Site VPN, Route 53, VPC endpoints/PrivateLink, security groups and NACLs
• Enterprise routing such as BGP and/or OSPF, and IPv4, TCP/IP, subnetting and CIDR
• Infrastructure automation with CloudFormation, Terraform, Python, Bash or AWS CLI
• Good-to-have: AWS networking certification, AWS Organizations, multi-region networking, Fortinet/Palo Alto firewalls, VPC Flow Logs, CloudWatch and packet captures