Sr. AWS Network Security Engineer

The Sr. AWS Network Security Engineer will design, secure, operate, and troubleshoot enterprise-grade cloud and hybrid network environments. The role focuses on AWS networking and security ownership, while also supporting Oracle Cloud Infrastructure (OCI) connectivity and advanced incident resolution across cross-cloud and on-premises systems.

Role Overview

This senior, hands-on engineering position owns AWS networking and security capabilities and supports OCI plus Oracle Exadata connectivity. The engineer will resolve complex connectivity and security issues in coordination with Network, Cloud, Security, Database, Infrastructure, and Application teams.

Responsibilities

• Design, operate, and troubleshoot AWS VPCs, subnets, route tables, Transit Gateway, internet/NAT gateways, Security Groups, and NACLs across multi-account environments.
• Manage routing and segmentation, enterprise and cloud firewall integrations, NAT, security zones, and resilient traffic flows.
• Support hybrid connectivity using AWS Direct Connect, Site-to-Site VPN, BGP, and associated remote-site configurations, including failover, migrations, and cutovers.
• Configure and troubleshoot OCI VCNs, routing, gateways, security controls, DNS, AWS and OCI connectivity, and Oracle Exadata integrations.
• Manage Route 53, public and private hosted zones, and hybrid DNS resolution across AWS, OCI, on-premises, and remote environments.
• Lead advanced incident troubleshooting and root cause analysis spanning cloud, firewalls, routing, DNS, applications, and data centers.
• Partner with Cybersecurity to support hardening, vulnerability remediation, logging, monitoring, compliance, and incident investigations.
• Maintain network diagrams, standards, runbooks, and architecture documentation, and identify automation and standardization opportunities.

Requirements

• Bachelor's Degree or equivalent experience.
• 5-7 years of relevant work experience.
• Strong hands-on AWS networking and network-security experience, including VPC architecture, Transit Gateway, advanced routing, Security Groups, and NACLs.
• Experience with AWS Direct Connect, Site-to-Site VPN, BGP, TCP/IP, enterprise firewalls, NAT, segmentation, Route 53, and DNS.
• Working knowledge of OCI networking, AWS-to-OCI integration, Oracle Exadata connectivity, and hybrid or multi-cloud architectures.
• Proven ability to troubleshoot complex end-to-end connectivity and security issues and perform root cause analysis during high-severity incidents.
• Strong documentation, architecture, communication, and cross-functional collaboration skills.

Technologies

• AWS, AWS VPCs, Transit Gateway, NAT gateways, Security Groups, NACLs
• AWS Direct Connect, Site-to-Site VPN, BGP, TCP/IP, Route 53
• OCI, OCI VCNs, DNS, Oracle Exadata
• AWS/OCI connectivity, public/private hosted zones

Preferred Qualifications

• Experience with large enterprise, multi-account, multi-VPC AWS environments and interconnected AWS/OCI environments.
• Experience with Palo Alto, Fortinet, Cisco, Check Point, AWS Network Firewall, SD-WAN, or comparable technologies.
• Network automation and Infrastructure as Code, including Terraform or similar tools.
• Experience with cloud network monitoring, high availability, disaster recovery, cloud migration, or data-center transformation.
• Relevant certifications such as AWS Advanced Networking, AWS Security, AWS Solutions Architect, OCI, CCNP/CCIE, or firewall/security certifications.

Benefits

• Comprehensive medical/dental coverage
• Generous PTO
• Education assistance
• Annual merit increase eligibility

Salary and Location

Location: Irvine, CA (onsite)

Salary: USD 135,000 - 150,000 per year

Target salary range: $135,000-150,000

Team Culture

The team values technology, agility, teamwork, continuous growth, and an inclusive environment where diverse perspectives are welcome.