Platform Engineer – AWS Network Infrastructure

About the role

We are looking for a Platform Engineer who will own the design, implementation, and continuous optimisation of our AWS network infrastructure. The role ensures high availability, peak performance and robust security for client‑facing systems across multi‑account, multi‑region environments.

Key responsibilities

• Design, implement and manage AWS networking components such as VPCs, subnets, route tables, Internet and NAT gateways, VPC peering and Transit Gateways.
• Own hybrid connectivity solutions including AWS Direct Connect and Site‑to‑Site VPN to provide low‑latency links between AWS and on‑premises or partner networks.
• Architect and maintain network segmentation strategies that enforce least‑privilege traffic controls.
• Design, deploy and operate DNS architecture with Amazon Route 53, including private hosted zones and resolver endpoints.
• Implement content delivery and load‑balancing using CloudFront, ALB/NLB and Global Accelerator to achieve low latency and high throughput.
• Manage IP address space (IPAM) across AWS accounts, ensuring scalable, non‑overlapping CIDR allocation.
• Define and enforce network security controls using Security Groups, Network ACLs, AWS Network Firewall, AWS WAF and AWS Shield.
• Implement zero‑trust network access principles and conduct regular security assessments to remediate misconfigurations.
• Ensure network configurations meet compliance frameworks such as NIST 800‑53, ISO/IEC 27001 and SOC 2.

Required profile

• Proven experience designing, operating and securing AWS network infrastructures in multi‑account, multi‑region settings.
• Strong understanding of cloud networking concepts, hybrid connectivity and zero‑trust security models.
• Familiarity with compliance requirements (NIST, ISO 27001, SOC 2) and ability to produce audit‑ready evidence.

Required skills

• AWS (VPC, Direct Connect, Site‑to‑Site VPN, Route 53, CloudFront, ALB, NLB, Global Accelerator, IPAM)
• Network security tools (Security Groups, Network ACLs, AWS Network Firewall, AWS WAF, AWS Shield)
• Compliance frameworks (NIST 800‑53, ISO/IEC 27001, SOC 2)