LIVE
WHAT YOU WILL DO
We are seeking a highly experienced Cloud Network Engineer to join the Cloud Networking team and help design, implement, operate, and continuously improve a large-scale enterprise AWS network environment.
This role will be responsible for delivering secure, resilient, scalable, and highly available cloud-networking capabilities across a multi-account, multi-region AWS environment. The engineer will work across AWS networking, enterprise network integration, cloud security, DNS, routing, connectivity, and application enablement.
The successful candidate will bring strong hands-on experience with AWS networking and a solid foundation in enterprise networking technologies. This person must be comfortable troubleshooting complex end-to-end connectivity issues involving AWS, on-premises infrastructure, routing protocols, firewalls, DNS, and application dependencies.
The position will work closely with Cloud Platform, Enterprise Network, Cybersecurity/Network Security, Infrastructure, application engineering, and other technology teams.
Roles & Responsibilities
Cloud Network Architecture & Engineering
Design, implement, and support cloud network architectures across AWS and/or other major cloud platforms, with AWS experience preferred.
Work with AWS networking services such as Amazon VPC, Transit Gateway, subnetting, route tables, VPC peering, PrivateLink, VPC endpoints, and Route 53; equivalent Azure or GCP experience will also be considered.
Implement secure and scalable multi-account, multi-region, and hybrid-cloud networking patterns.
Develop and maintain cloud network standards, reusable architectures, and engineering patterns.
Support network segmentation and controlled traffic flows across application, platform, shared-service, and security domains.
Participate in architecture reviews and provide cloud-networking guidance for new applications and platform migrations.
Hybrid Connectivity
Design, implement, and troubleshoot connectivity between cloud and enterprise/on-premises environments.
Work with private connectivity services, Site-to-Site VPN, BGP, route propagation, routing domains, and hybrid connectivity patterns. AWS Direct Connect experience is preferred.
Troubleshoot complex traffic paths across cloud environments, enterprise routing, firewalls, and security controls.
Partner with Enterprise Network teams on cloud/on-premises routing boundaries and connectivity changes.
DNS & Network Services
Implement and support cloud DNS and network services, including Route 53/Route 53 Resolver or equivalent Azure/GCP services, private hosted zones, inbound/outbound DNS resolution, and hybrid DNS architectures.
Troubleshoot DNS resolution issues across cloud and enterprise environments.
Support cloud network services such as private endpoints, PrivateLink or equivalent services, load balancing, and private API connectivity.
Security Integration
Implement cloud-networking solutions aligned with enterprise security requirements.
Work with firewall and security teams to design and troubleshoot inspected traffic flows.
Support network segmentation, security groups or equivalent cloud controls, NACLs, endpoint controls, and secure connectivity patterns.
Ensure network designs follow enterprise security and least-privilege principles.
Operations & Incident Management
Provide senior-level troubleshooting for production incidents, service requests, and network onboarding activities.
Participate in major incident response, root-cause analysis, problem management, and preventive engineering.
Analyze routing, DNS, firewalls, cloud security controls, endpoints, TCP/IP, and connectivity behavior to isolate network versus application/service issues.
Support operational readiness, change management, documentation, and network lifecycle activities.
Resilience, Capacity & Continuous Improvement
Identify single points of failure and improve network resiliency and operational continuity.
Contribute to capacity planning, growth forecasting, lifecycle management, and disaster-recovery/network recovery strategies.
Help reduce key-person dependency through documentation, knowledge sharing, standardization, and team development.
Continuously improve network reliability, observability, operational processes, and engineering practices.
WIN
WHAT WE EXPECT OF YOU
Basic Qualifications and Experience
Bachelor’s degree in computer science, Information Technology, Engineering, or a related technical discipline and 3+ years of relevant experience, or equivalent combination of education and experience.
Must-Have Skills
Strong hands-on experience designing and operating AWS networking infrastructure in enterprise environments.
Significant experience with
AWS VPC
Transit Gateway
Route tables and routing
Direct Connect and/or Site-to-Site VPN
Route 53 and DNS
VPC endpoints / PrivateLink
Security Groups and Network ACLs
Strong understanding of IPv4, TCP/IP, subnetting, CIDR, routing, DNS, and network troubleshooting.
Experience with infrastructure automation using CloudFormation, Terraform, Python, Bash, or AWS CLI.
Practical experience with enterprise routing technologies such as BGP and/or OSPF.
Demonstrated experience troubleshooting complex hybrid-cloud connectivity issues.
Experience working in environments with multiple teams, accounts, platforms, and organizational dependencies.
Ability to participate in production support and critical incident response when required.
Good-to-Have Skills
AWS networking certification such as AWS Certified Advanced Networking – Specialty.
Experience with AWS Organizations and large-scale multi-account environments.
Experience with multi-region AWS networking.
Experience integrating AWS networking with enterprise firewalls such as Fortinet, Palo Alto, or equivalent.
Experience with cloud security architecture and network segmentation.
Experience with centralized DNS and hybrid DNS architectures.
Experience with infrastructure automation using CloudFormation, Terraform, Python, Bash, or AWS CLI.
Experience with observability and network diagnostics including VPC Flow Logs, CloudWatch, packet captures, and network telemetry.
Experience supporting regulated or highly controlled enterprise environments.
Strong written and verbal communication skills with the ability to explain complex technical issues to both engineers and leadership.
Soft Skills
Strong ownership and accountability.
Able to work independently on technically complex problems.
Calm and analytical during production incidents.
Strong collaboration across Cloud, Network, Security, Infrastructure, and Application teams.
Willingness to document and transfer knowledge rather than becoming a single point of dependency.
Strong engineering judgment and risk awareness.
Ability to balance operational support with long-term architectural improvement.
THRIVE
WHAT YOU CAN EXPECT OF US
Vast opportunities to learn, develop, and move up and across our global organization.
Diverse and inclusive community of belonging, where colleagues are empowered to bring ideas to the table, take risks, and act.
Generous Amgen Total Rewards Plan comprising healthcare, finance, wealth, and career benefits.
Flexible work arrangements.
APPLY NOW
Objects in your future are closer than they appear. Join us.
CAREERS.AMGEN.COM
EQUAL OPPORTUNITY STATEMENT
Amgen is an Equal Opportunity employer and will consider you without regard to your race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.
We will ensure that individuals with disabilities are provided a reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request an accommodation.
- .
- Salary Range
- 38 241,50 EUR - 51 738,50 EUR
