astra-north

AWS Cloud Engineer – AWS Networking, VPC, Infrastructure & Security

astra-north

Toronto, Ontario, CanadaContractPosted Jul 8, 2026

Job description

AWS Cloud Engineer – AWS Networking, Infrastructure & Security Toronto, ON – 3 Days WFO Experience:

  • 6–8 years Essential Skills:
  • More than 5 years of hands-on AWS experience in production environments.
  • Strong knowledge of AWS Networking:
  • VPC
  • Subnets
  • Transit Gateway (TGW)
  • Direct Connect
  • Route 53
  • ALB / NLB
  • Experience with:
  • AWS IAM
  • SCPs
  • Multi-account AWS Organizations
  • Proficiency in Infrastructure as Code (IaC):
  • Terraform
  • Cloud. Formation
  • AWS CDK
  • Familiarity with AWS security services:
  • Guard. Duty
  • Security Hub
  • Inspector
  • Macie
  • AWS Certified Solutions Architect Associate or Professional preferred.
  • Scripting proficiency in:
  • Python
  • Bash
  • Power. Shell
  • Experience with VPC Flow Log analysis and ENI-level troubleshooting. Role & Responsibilities:
  • Design and deploy AWS infrastructure including:
  • VPCs
  • Subnets
  • Security Groups
  • Route Tables
  • Transit Gateways
  • VPN / Direct Connect
  • Configure and manage AWS VPC:
  • Interface Endpoints
  • ALB / NLB
  • Private. Link services
  • Manage AWS compute services:
  • EC2
  • EKS
  • ECS
  • Lambda
  • Auto Scaling Groups
  • Implement and maintain AWS IAM:
  • Roles
  • Policies
  • Permission Boundaries
  • SCPs in multi-account environments
  • Configure:
  • VPC Flow Logs
  • Cloud. Trail
  • Cloud. Watch
  • AWS Security Hub
  • Build and manage IaC deployments using:
  • Terraform
  • AWS Cloud. Formation
  • AWS CDK
  • Support cross-cloud connectivity between AWS and Azure, including:
  • AMQP via Event Hub
  • S3 cross-account logging
  • Develop and maintain CI/CD pipelines for AWS workloads.
  • Troubleshoot:
  • VPC routing
  • ENI-level connectivity
  • Security Group / NACL issues
  • Maintain technical documentation, runbooks, and architecture diagrams.

Nice to Have

  • AWS Certified DevOps Engineer or Advanced Networking Specialty.
  • Experience with AWS-to-Azure hybrid connectivity scenarios.