Senior Cloud Network Engineer – Automation, IaC

Job not on LinkedIn

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Vecten

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2010

🤖 Artificial Intelligence

🏥 Healthcare

💸 Finance

Artificial Intelligence • Healthcare • Finance

Vecten is an AI-native data and technology partner that builds proprietary data infrastructure and AI systems for private capital (venture capital and private equity) and healthcare & life sciences. It offers a full-stack delivery model — strategy workshops (Vecten Compass), an AI-native data platform deployed in client clouds (Vecten Core), an edge intelligence layer with ML models, LLM workflows and AI agents (Vecten Edge), and continuous operations with forward-deployed engineers and domain-specific AI agents (Vecten Drive). Vecten emphasizes compliant, production-ready systems (including HIPAA-aligned solutions for healthcare), measurable business outcomes, and long-term engineering partnerships; its clients collectively manage $1. 2T+ in assets and the company highlights ~15 years of engineering depth.

📋 Description

• Drive the active **Transit Gateway → AWS Cloud WAN migration** – ~10 segments, tag-based segmentation, phased TGW decommission; already in flight and needs an engineer who can own it to completion • Lead the **centralized firewall programme** replacing the NACL model – policing cross-account traffic, analysing VPC Flow Logs in S3 to derive firewall rules, and managing change control at scale • Operate and evolve the **hybrid firewall architecture**: AWS Network Firewall for east-west traffic alongside NGFWs via Gateway Load Balancers; understand and maintain the boundary between them • Build and maintain a **Terraform module library** for network provisioning (VPC layouts, routing, firewall policies, Cloud WAN policies) consumed across the org via GitHub / GitHub Enterprise • Own **IP address management via AWS IPAM** at 400+ account scale, supporting account-vending workflows • Support **DNS** (Route 53 + inbound resolvers to Active Directory) and **Direct Connect** (NY primary, Virginia POP failover, four-nines target) • Act as the primary technical bridge between Platform Engineering and Networking – turning routing requirements, security standards, and network architecture into IaC both sides can operate and trust

🎯 Requirements

• Deep, hands-on **AWS networking at multi-account scale**: VPC design, routing, security groups, Transit Gateway, PrivateLink, IPAM • **Conceptual understanding of AWS Cloud WAN** – core network policy documents, segments, tag-based routing, multi-region/multi-account topologies; hands-on production or migration experience a plus • **Centralized firewall & traffic inspection** – stateful/stateless rule groups, east-west inspection, centralized policy management; AWS Network Firewall, Palo Alto NGFW (via GWLB), or comparable vendors all count equally • **Strong Terraform / IaC at scale** – module design, state management, plan/apply, versioning, remote backends (real depth, not just consuming modules) – via GitHub / GitHub Enterprise • **Data-driven network automation** – ability to query VPC Flow Logs in S3 (Athena, Python/pandas, or equivalent) and translate traffic patterns into firewall rule changes; this is where purely traditional network engineers fall short • **Cross-domain fluency** – comfortable with pull-request reviews and BGP/routing discussions in the same week; familiarity with CI/CD for infrastructure and policy-as-code (OPA, Sentinel, or AWS Config); change-management discipline for high-blast-radius changes • Solid spoken English for peer-level technical discussion with the client.

🏖️ Benefits

• Unrestricted AI Stack & Premium Gear: Fully paid licenses for Cursor, Claude Pro, etc. • Total Autonomy (Remote-First): No filler meetings, no Jira bloat, no micromanagement. You own the workflow. We care about shipped systems in production, not logged hours. • Direct Impact: You’ll work face-to-face with our CEO, CTO & VPs and VC/PE General Partners. • Frontier Engineering Culture: Build alongside elite engineers who are shipping systems that drive real investment decisions. Backed by continuous growth and a strong knowledge-sharing culture (check our YouTube).