COGNITO INC
Role: Cloud Architect (AWS)/Network
Location: Brampton / Toronto, ON
Hire Type: Contract (6 Months, Extendable depending upon the project)
Job Description
Primary Skills:
- AWS Direct Connect
- Network routing (BGP, OSPF)
- AWS Cloud Services (VPC, Transit Gateway, API Gateway)
- Hybrid cloud architectures
- On-premises to cloud connectivity
- Network flow optimization
- AWS Control Tower, AWS Organizations, AWS Identity Center
- Terraform
- Infrastructure as Code (IaC)
- Network security
- AWS IAM
Responsibilities:
- Design, implement, and manage cloud infrastructure using AWS services and Terraform
- Configure and manage AWS Direct Connect connections, including setup of virtual interfaces and BGP routing ¿ Implement and optimize connectivity between AWS and on premises networks and data centers
- Design and implement network flow strategies for efficient data transfer between cloud and on premises environments
- Develop and maintain secure, scalable hybrid cloud architectures
- Implement security best practices and ensure compliance across hybrid infrastructure
- Collaborate with cross functional teams to gather requirements and translate them into technical designs and specifications
- Troubleshoot and resolve complex network and infrastructure related issues in hybrid environments
- Stay updated with the latest advancements in AWS services and hybrid cloud technologies
Qualifications:
- Bachelor’s degree in computer science, Network Engineering, or a related field
- 5+ years of experience as an AWS Engineer, with a strong focus on networking, AWS Direct Connect, and hybrid cloud architectures
- Hands on experience with AWS services such as VPC, Direct Connect, Transit Gateway, Route 53 and API Gateway.
- Proficiency in network routing protocols, especially BGP, and experience with BGP communities
- Expertise in configuring and managing AWS Direct Connect, including public and private virtual interfaces
- Strong understanding of network architectures and experience designing and implementing hybrid cloud solutions
- Experience optimizing network flows and data transfer between AWS and on premises data centers
- Hands on experience with IAM roles, Policies and SCP management including cross account access patterns.
- Strong knowledge maintaining security guardrails at scale across AWS Organizations, Control Tower and Identity Center.
- Experience with automating IAM operations using infrastructure as code (Terraform/CloudFormation), implementing automated access reviews using AWS IAM Access Analyzer, and building self-service access management solutions using AWS Lambda and Step Functions will be a plus.
- Experience with infrastructure as code (IaC) tools, particularly Terraform
- AWS certifications (e.g., AWS Certified Advanced Networking Specialty, AWS Certified Solutions Architect Professional) are a plus
