Platform Engineer (AWS Network)

About the role

The Platform Engineer will own the design, implementation, and continuous optimisation of our AWS network infrastructure. You will ensure high availability, peak performance, and airtight security for client‑facing systems across multi‑account, multi‑region environments.

Key responsibilities

• Design, implement, and manage AWS networking components such as VPCs, subnets, route tables, Internet and NAT gateways, VPC peering, and Transit Gateways.
• Architect and operate hybrid connectivity solutions including AWS Direct Connect and Site‑to‑Site VPN.
• Define and enforce network segmentation strategies that apply the principle of least privilege.
• Build and maintain DNS architecture with Amazon Route 53, including private hosted zones and resolver endpoints.
• Implement content delivery and load‑balancing using CloudFront, ALB/NLB, and Global Accelerator.
• Manage IP address space (IPAM) to provide scalable, non‑overlapping CIDR allocations.
• Design and enforce network security controls using Security Groups, Network ACLs, AWS Network Firewall, AWS WAF, and AWS Shield.
• Lead zero‑trust network access design and conduct regular security assessments.
• Ensure compliance with NIST 800‑53, ISO/IEC 27001, and SOC 2 frameworks.

Required profile

• Proven experience designing, operating, and securing AWS network environments.
• Strong understanding of hybrid connectivity, DNS, and traffic‑distribution services.
• Ability to implement zero‑trust principles and conduct thorough security assessments.
• Familiarity with compliance standards such as NIST 800‑53, ISO/IEC 27001, and SOC 2.

Required skills

• AWS (VPC, Direct Connect, Site‑to‑Site VPN, Transit Gateway)
• Amazon Route 53
• AWS CloudFront, Elastic Load Balancing (ALB/NLB), Global Accelerator
• IP Address Management (IPAM) and CIDR planning
• Security Groups, Network ACLs, AWS Network Firewall, AWS WAF, AWS Shield
• Zero‑trust network design
• NIST 800‑53, ISO/IEC 27001, SOC 2 compliance knowledge