Overview
In this Senior Cloud Network Engineer role you design, implement and operate AWS cloud networks with a focus on reliability, security and scalability. You will work across VPCs, Transit Gateway, Direct Connect, VPN and DNS, embedding secure access and threat protection by design. You’ll lead IaC and automation using Terraform, build reusable modules, and shape network standards while mentoring teammates. The position involves cross‑team collaboration with Cyber Security, DevOps and Platform to deliver robust, observable, and cost‑effective cloud networking. This is a hands-on opportunity in a hedge fund environment offering strong growth and a comprehensive benefits package.
Pay / Benefits
- Pension
- Private medical care
- Wellness days
- Training and conference budget
Responsibilities
- Design and deliver AWS cloud network architectures across VPCs, Transit Gateway, Direct Connect and VPN
- Implement and improve cloud network security controls in collaboration with Cyber Security
- Develop and maintain secure hybrid connectivity (AWS, Azure, on-prem)
- Build and maintain Terraform modules and automation for network provisioning
- Develop CI/CD pipelines for network provisioning and change management
- Mentor engineers and align with DevOps, Platform and wider technology teams
- Define cloud networking standards and best practices
Key requirements
- Expert IaC skills with Terraform (modules, state management, workspaces)
- Strong AWS networking experience (VPC, Transit Gateway, Direct Connect, VPN, Route 53, SGs, NACLs)
- AWS Advanced Networking Specialty certification or in progress
- Design for reliability and resilience (HA, failover, DR)
- Good knowledge of network security, segmentation, least privilege, threat protection
- Automation and CI/CD experience for provisioning and operational tasks
- Knowledge of Routing and Switching (BGP), VPN types, monitoring and observability
- Collaborative and pragmatic mindset, able to push back when needed
- Collaborative
- Pragmatic
- Mentoring
- Terraform
- AWS networking (VPC, Transit Gateway, Direct Connect, VPN, Route 53)
- Security groups and NACLs
…
