Cloud Network Engineer (AWS)

Cloud Network Engineer – Software Support

Job Summary

We are looking for a Cloud Network Engineer to support customer-hosted environments and manage AWS cloud networking infrastructure. The role is responsible for customer onboarding, AWS VPC configuration, VPN connectivity, DNS management, routing, firewall/security configurations, and network troubleshooting.

The successful candidate will work closely with customer IT teams, application teams, DevOps, and internal security teams to ensure reliable, secure, and highly available network connectivity.

Key Responsibilities1. Customer Onboarding

• Set up AWS VPCs, subnets, route tables, and security groups for new customers.
• Configure VPN connectivity between customer networks and AWS-hosted environments.
• Establish and validate routing between customer on-premises networks and AWS.
• Perform connectivity testing and coordinate handoff to application or support teams.
• Coordinate with customer IT teams to gather and validate network requirements.

2. DNS Management

• Configure and maintain DNS records for customer-hosted environments.
• Manage AWS Route 53 hosted zones and DNS configurations.
• Perform DNS changes during customer onboarding, changes, and offboarding.
• Troubleshoot DNS resolution and configuration issues.

3. VPN Tunnel Management

• Create and maintain AWS Site-to-Site VPN connections.
• Configure AWS Virtual Private Gateway (VGW) and Customer Gateway (CGW) settings.
• Coordinate with customer IT teams on IKE/IPsec parameters and tunnel configurations.
• Monitor VPN tunnel health and troubleshoot connectivity issues or tunnel drops.
• Perform tunnel re-keying, configuration changes, and maintenance as required.

4. AWS Infrastructure & Firewall Management

• Design, configure, and maintain AWS VPC architecture for hosted environments.
• Configure and manage security groups and firewall rules following least-privilege principles.
• Manage Network ACLs where applicable.
• Maintain EC2 instances and related compute resources.
• Implement infrastructure changes, expansions, and configuration updates.
• Work with internal security teams to ensure infrastructure meets security and compliance requirements.

5. Network Routing

Internal Routing

• Configure and maintain AWS route tables.
• Manage routing between subnets and Availability Zones.
• Configure inter-VPC routing where applicable.

VPN Routing

• Configure routes for traffic destined for customer networks.
• Manage static routing and support BGP-based routing with customer gateways.
• Troubleshoot routing conflicts, asymmetric routing, and network path issues.

SNAT/NAT over VPN

• Configure Source NAT (SNAT) for traffic traversing VPN tunnels.
• Implement IP address translation when customer networks have overlapping IP ranges.
• Troubleshoot NAT-related connectivity and routing issues.

6. Network Troubleshooting & Customer Support

• Investigate and resolve customer-reported network connectivity issues.
• Diagnose network path and routing problems using tools such as traceroute, tcpdump, and Wireshark.
• Troubleshoot VPN, DNS, routing, firewall, and connectivity issues.
• Work directly with customer IT teams to resolve network conflicts and connectivity problems.
• Serve as an escalation point for network-layer issues.
• Provide technical support through phone and email while meeting defined Service Level Agreements (SLAs).
• Maintain accurate records of configurations, changes, troubleshooting activities, and incident resolutions.

7. Additional Responsibilities

• Collaborate with developers, DevOps, IT, application, and security teams to support business and infrastructure requirements.
• Provide technical guidance and share cloud networking best practices with team members.
• Participate in incident response, maintenance activities, and infrastructure changes.
• Perform other related duties as required to support business objectives.
• Ensure tasks and deliverables are completed on time and according to quality standards.

QualificationsEducation

• Bachelor’s degree in Information Technology, Computer Engineering, Computer Science, or a related field.
• Candidates with a two-year technical degree plus relevant experience and/or training may be considered.
• Equivalent combinations of education and relevant experience may also be considered.

Required Experience

• Minimum 3 years of hands-on experience with AWS networking, particularly:
• VPC
• Subnets
• Route Tables
• Security Groups
• VPN
• Route 53
• Hands-on experience creating, configuring, and troubleshooting AWS Site-to-Site VPNs.
• Experience with SNAT/NAT configurations over VPN tunnels.
• Experience with static routing and working knowledge of BGP.
• Experience troubleshooting network connectivity, routing, and firewall issues.
• Experience working directly with customer IT or infrastructure teams.
• Experience collaborating with security teams on infrastructure security and compliance.
• Experience with Windows Server patching.
• CCNA or equivalent networking foundation is required.

Preferred Qualifications

• AWS Cloud Networking certification or equivalent cloud networking experience.
• Experience supporting customer-facing cloud environments.
• Experience with infrastructure monitoring and observability tools.
• Experience working in 24x7 production or managed services environments.

Technical Skills

• AWS Networking: VPC, Subnets, Route Tables, Security Groups, NACLs, VGW, CGW
• VPN: Site-to-Site VPN, IKE/IPsec, tunnel configuration and troubleshooting
• NAT: SNAT/NAT configuration and troubleshooting over VPN
• DNS: Route 53, DNS record types, TTL management, DNS resolution troubleshooting
• Routing: Static Routing, BGP fundamentals, route table design, asymmetric routing
• Firewalls: Security Group configuration, firewall rules, least-privilege access
• Network Troubleshooting: TCP/IP, traceroute, tcpdump, Wireshark, packet analysis
• Monitoring: Datadog, SolarWinds, Prometheus, PRTG, or similar monitoring tools
• Windows Server: Server patching and basic administration

Soft Skills

• Strong analytical and problem-solving skills with attention to detail.
• Clear and empathetic communication with both technical and non-technical stakeholders.
• Strong customer service and stakeholder management skills.
• Ability to coordinate effectively with external IT teams and customers.
• Strong collaboration skills across Development, DevOps, IT, Security, and Infrastructure teams.
• Ability to communicate clearly during incidents, outages, and maintenance activities.
• Strong documentation and organizational skills.
• Ability to remain calm and effective during critical incidents.
• Willingness to share knowledge, mentor peers, and promote cloud networking best practices.
• Ability to work effectively in a fast-paced environment with changing priorities.

Work Conditions

• Willingness to work on shifting schedules, including weekends and holidays, based on business and customer requirements.
• Willingness to provide on-call support during weekends or off-hours for critical incidents.
• Ability to work independently while managing multiple priorities in a fast-paced environment.
• Must maintain professionalism and a customer-focused approach during incidents, escalations, and high-pressure situations.

Competency Profile

• Customer Focus
• Action Oriented
• Drives Results
• Collaboration
• Planning and Alignment
• Analysis and Problem Solving
• Judgment and Decision Making
• Flexibility and Adaptability
• Technical Expertise
• Incident Management

Pay: Php50,000.00 - Php60,000.00 per month

Work Location: Hybrid remote in Quezon City