Note: The job is a remote job and is open to candidates in USA. Serco supports U.S. Department of Health and Human Services CMS programs by developing, maintaining, and managing infrastructure for healthcare eligibility services. The AWS Cloud Network Engineer III will design, implement, optimize, and secure AWS network architectures, manage advanced cloud and network security technologies, automate infrastructure with IaC tools, and support network operations and incident response.
Responsibilities
- Design, implement, and optimize AWS networking to include Virtual Private Cloud (VPC) configurations, including subnets, route tables, and internet gateways while ensuring secure and efficient network connectivity
- Configure and manage advanced networking features in AWS, such as VPC peering, VPN connections, Direct Connect, and Transit Gateway, to facilitate seamless communication between different VPCs and on-premises networks
- Collaborate with cross-functional teams to design and implement highly available and scalable network architectures that meet the performance and reliability requirements of our cloud-based applications and services
- Utilize advanced networking monitoring and troubleshooting tools, such as SIEM Splunk, AWS CloudWatch, AWS CloudTrail, and SolarWinds NetFlow, to proactively identify and resolve network performance issues and security incidents
- Work on Big IP F5 for application and firewall services for third party integrations
- Working knowledge of Palo Alto firewalls and firewall management Panorama policies, routes and configuration, and Cisco route/switch including upgrades and ACL management
- Work closely with DevOps and development teams to automate network infrastructure provisioning and configuration using Infrastructure as Code (IaC) tools such as AWS CloudFormation and Terraform
- Create, update, and approve Terraform modules using Terraform Enterprise (TFE) and Gitlab
- Evaluate and recommend new AWS networking services, features, and best practices to improve the performance, security, and cost-effectiveness of our cloud infrastructure
- Perform security and compliance remediation and mitigation on onsite and AWS infrastructure
- Document network designs, configurations, and operational procedures, and provide training and guidance to team members to ensure knowledge sharing and continuous improvement
- Participate in on-call rotation to provide support for network-related incidents and perform after hours upgrades and changes as needed
Skills
- Authorization to work in US
- Ability to obtain and/or maintain a public trust
- Bachelor's degree in Computer Science, Information Technology, or related field
- Willing to accept 2-4 years of related experience in lieu of degree
- Solid understanding of AWS networking services and features, including VPC, Elastic Load Balances, Security Groups, internet gateways, and routing tables
- Experience with advanced networking concepts in AWS, such as VPC peering, VPN connections, Internet Gateways, and Transit Gateway
- Virtual and physical Palo Alto Firewall and Panorama configuration, upgrades, and policy management
- Knowledge of Cisco switch configuration and updates
- Proficiency in using AWS networking monitoring and troubleshooting tools, such as Splunk, AWS CloudWatch, AWS CloudTrail, and SolarWinds NetFlow
- Experience with Infrastructure as Code (IaC) tools such as Terraform or CloudFormation for automating network infrastructure provisioning and configuration
- Knowledge of Zscaler Zero Trust Architecture and ability to learn ZPA and ZIA network/internet changes
- Excellent problem-solving and troubleshooting skills, with the ability to analyze complex network issues and implement effective solutions
- Strong communication and collaboration skills, with the ability to work effectively in a cross-functional team environment
- Being remote, can multitask, manage time, schedule changes, and attend meetings using Microsoft Teams, Outlook, MS365, and Lucid Suite
- Has worked with AWS security best practices for federal environments
- Knowledge of AWS Connect configuration and management
- Knowledge of application API connects within AWS
- Knowledge of security tools such as Zscaler and Crowdstrike
- AWS Certified Cloud Practitioner preferred – AWS Certified Advanced Networking is a plus
- Knowledge of SAFE Agile and DevOps practices and tools, such as CI/CD pipelines is a plus
Benefits
- Working remotely for our Virginia location
- Competitive pay
- Performance-based incentives
- Comprehensive health coverage
- Health savings accounts
- Retirement plans
- Life and disability insurance
- Time-off programs that support work-life balance
- Medical, dental, and vision insurance
- Robust vacation and sick leave benefits
- Flexible work arrangements where permitted by role or contract
- 401(k) plan that includes employer matching funds
- Tuition reimbursement program
- Optional pet insurance
- Optional home and auto insurance
- Optional additional life and accident insurance
- Optional critical illness insurance
- Optional group legal coverage
- Optional identity theft protection
- Birth, adoption, and parental leave benefits
- Employee Assistance Plan
Company Overview