Senior Associate Aws Cloud Network Engineer

Senior Associate AWS Cloud Network Engineer At AMGEN, Technology isn't just a support function—it's a catalyst for discovery, transformation, and real-world impact. Here, your ideas fuel innovation that improves and saves lives of patients in dire need of our medicines. Are you ready to do meaningful work that matters? LIVE WHAT YOU WILL DO We are seeking a highly experienced Senior Associate AWS Cloud Network Engineer to join the Cloud Networking team and help design, implement, operate, and continuously improve a large-scale enterprise AWS network environment. This role will be responsible for delivering secure, resilient, scalable, and highly available cloud‐networking capabilities across a multi‐account, multi‑region AWS environment. The engineer will work across AWS networking, enterprise network integration, cloud security, DNS, routing, connectivity, and application enablement. The successful candidate will bring strong hands‑on experience with AWS networking and a solid foundation in enterprise networking technologies. This person must be comfortable troubleshooting complex end‑to‑end connectivity issues involving AWS, on‑premises infrastructure, routing protocols, firewalls, DNS, and application dependencies. The position will work closely with Cloud Platform, Enterprise Network, Cybersecurity/Network Security, Infrastructure, application engineering, and other technology teams. Roles & Responsibilities Cloud Network Architecture & Engineering Design, implement, and support AWS network architectures using Amazon VPC, shared VPC architectures, Transit Gateway, subnetting, route tables, VPC peering, Private Link, VPC endpoints, AWS Route53 and related AWS networking services. Implement secure and scalable multi‑account and multi‑region networking patterns. Develop and maintain cloud network standards, reusable architectures, and engineering patterns. Support network segmentation and controlled traffic flows across application, platform, shared-service, and security domains. Participate in architecture reviews and provide cloud‑networking guidance for new applications and platform migrations. Hybrid Connectivity Design, implement, and troubleshoot connectivity between AWS and enterprise/on‑premises environments. Work with AWS Direct Connect, Site‑to‑Site VPN, BGP, route propagation, routing domains, and hybrid connectivity patterns. Troubleshoot complex traffic paths across AWS, Direct Connect, enterprise routing, firewalls, and security controls. Partner with Enterprise Network teams on cloud/on‑premises routing boundaries and connectivity changes. DNS & Network Services Implement and support Amazon Route 53, Route 53 Resolver, private hosted zones, inbound/outbound DNS resolution, and hybrid DNS architectures. Troubleshoot DNS resolution issues across AWS and enterprise environments. Support cloud network services such as VPC endpoints, Private Link, load balancing, and private API connectivity. Security Integration Implement cloud‑networking solutions aligned with enterprise security requirements. Work with firewall and security teams to design and troubleshoot inspected traffic flows. Support network segmentation, security groups, NACLs, endpoint controls, and secure connectivity patterns. Ensure network designs follow enterprise security and least‑privilege principles. Operations & Incident Management Provide senior‑level troubleshooting for production incidents, service requests, and network onboarding activities. Participate in major incident response, root‑cause analysis, problem management, and preventive engineering. Analyze routing, DNS, firewall, security group, endpoint, TCP/IP, and connectivity behavior to isolate network versus application/service issues. Support operational readiness, change management, documentation, and network lifecycle activities. Resilience, Capacity & Continuous Improvement Identify single points of failure and improve network resiliency and operational continuity. Contribute to capacity planning, growth forecasting, lifecycle management, and disaster‑recovery/network recovery strategies. Help reduce key‑person dependency through documentation, knowledge sharing, standardization, and team development. WIN WHAT WE EXPECT OF YOU Basic Qualifications and Experience Bachelor's degree in computer science, Information Technology, Engineering, or a related technical discipline and 3+ years of relevant experience, or equivalent combination of education and experience. Must‑Have Skills Strong hands‑on experience designing and operating AWS networking infrastructure in enterprise environments. Significant experience with: AWS VPC, Transit Gateway, Route tables and routing, Direct Connect and/or Site‑to‑Site VPN, Route 53 and DNS, VPC endpoints / Private Link, Security Groups and Network ACLs. Strong understanding of IPv4, TCP/IP, subnetting, CIDR, routing, DNS, and network troubleshooting. Experience with infrastructure automation using Cloud Formation, Terr