04/26/2026 updated
100 % available
Senior AWS Cloud Network Engineer & Terraform Expert
Margate, United Kingdom
Only remote
AWS Certified Advanced Networking - SpecialtyDirect ConnectAnsibleTCP/IPAWS VPCCisco
Cloud Networking & AWS Architecture
Expertise in designing and delivering global-scale, multi-region and multi-account network connectivity in AWS environments, including VPC, Transit Gateway, Direct Connect, Site-to-Site VPN, Client VPN, Network Firewall, Route 53, and CloudWAN. Proven track record of architecting resilient hub-and-spoke and low-latency topologies for business-critical trading workloads.
Infrastructure as Code with Terraform
Expert-level proficiency in Terraform and Terraform Cloud/Enterprise, including establishing best practices, reusable module libraries, and peer-review processes adopted company-wide. Extensive experience building and maintaining fully automated GitOps-driven CI/CD pipelines using Git, GitLab, GitHub, and Atlantis for all networking and infrastructure changes.
DevOps & CI/CD Automation
Deep experience building fully automated CI/CD pipelines achieving zero manual console changes in production. Skilled in automation tooling including Python, Ansible, Puppet, and Bash, with a strong focus on Site Reliability Engineering, security, compliance, and operational excellence.
Traditional & Advanced Networking Protocols
Strong foundation in BGP, OSPF, MPLS, EVPN, IP Routing, IPsec/GRE VPNs, IPv4/IPv6, DNS, and DHCP for data centre and global connectivity, including multicast environments.
Security, Firewalls & Load Balancing
Hands-on experience with network firewalls, Security Groups, NACLs, iptables, ipf, and Route 53. Proficient with firewall platforms including Cisco, Palo Alto, and Checkpoint, as well as load balancers such as F5 LTM/GTM, AWS ALB/NLB, NGINX, and HAProxy.
Security & Observability
Knowledge of network hardening, SSL/TLS, PKI, Tufin, Nessus, CloudTrail, VPC Flow Logs, PRTG, and Corvil for monitoring and compliance in complex environments.
Systems & Virtualisation
Proficiency with Linux systems (RHEL, CentOS, Debian), VMware ESXi/NSX, Docker, Kubernetes, HAProxy, and NGINX for infrastructure and platform operations.
Hybrid & On-Premise to Cloud Migration
Extensive experience leading on-premise to cloud migrations across AWS, Azure, and VMware Cloud on AWS, including hybrid connectivity, multi-data-centre architecture design, and BGP/EVPN implementation.
Network Hardware & Vendor Platforms
Practical experience with Cisco IOS/XE/NX-OS, Arista, Palo Alto, and Checkpoint platforms for enterprise and data centre networking deployments.
Expertise in designing and delivering global-scale, multi-region and multi-account network connectivity in AWS environments, including VPC, Transit Gateway, Direct Connect, Site-to-Site VPN, Client VPN, Network Firewall, Route 53, and CloudWAN. Proven track record of architecting resilient hub-and-spoke and low-latency topologies for business-critical trading workloads.
Infrastructure as Code with Terraform
Expert-level proficiency in Terraform and Terraform Cloud/Enterprise, including establishing best practices, reusable module libraries, and peer-review processes adopted company-wide. Extensive experience building and maintaining fully automated GitOps-driven CI/CD pipelines using Git, GitLab, GitHub, and Atlantis for all networking and infrastructure changes.
DevOps & CI/CD Automation
Deep experience building fully automated CI/CD pipelines achieving zero manual console changes in production. Skilled in automation tooling including Python, Ansible, Puppet, and Bash, with a strong focus on Site Reliability Engineering, security, compliance, and operational excellence.
Traditional & Advanced Networking Protocols
Strong foundation in BGP, OSPF, MPLS, EVPN, IP Routing, IPsec/GRE VPNs, IPv4/IPv6, DNS, and DHCP for data centre and global connectivity, including multicast environments.
Security, Firewalls & Load Balancing
Hands-on experience with network firewalls, Security Groups, NACLs, iptables, ipf, and Route 53. Proficient with firewall platforms including Cisco, Palo Alto, and Checkpoint, as well as load balancers such as F5 LTM/GTM, AWS ALB/NLB, NGINX, and HAProxy.
Security & Observability
Knowledge of network hardening, SSL/TLS, PKI, Tufin, Nessus, CloudTrail, VPC Flow Logs, PRTG, and Corvil for monitoring and compliance in complex environments.
Systems & Virtualisation
Proficiency with Linux systems (RHEL, CentOS, Debian), VMware ESXi/NSX, Docker, Kubernetes, HAProxy, and NGINX for infrastructure and platform operations.
Hybrid & On-Premise to Cloud Migration
Extensive experience leading on-premise to cloud migrations across AWS, Azure, and VMware Cloud on AWS, including hybrid connectivity, multi-data-centre architecture design, and BGP/EVPN implementation.
Network Hardware & Vendor Platforms
Practical experience with Cisco IOS/XE/NX-OS, Arista, Palo Alto, and Checkpoint platforms for enterprise and data centre networking deployments.
Languages
EnglishNative speaker
Project history
Acted as primary cloud network engineer and Terraform/IaC authority for the DevOps team. Led flagship 2024-2025 project designing and delivering fully automated global network connectivity across multiple AWS regions and accounts using Terraform and GitOps workflows. Built and maintained fully automated CI/CD pipelines achieving zero manual console changes in production. Architected resilient multi-region hub-and-spoke and Transit Gateway-based topologies for low-latency trading workloads. Provided architectural guidance for VPC peering, Direct Connect, VPN, Network Firewall, Route 53, Security Groups, and NACLs. Established Terraform best practices, reusable module library, and peer-review processes company-wide. Retained ownership of legacy on-premise and hybrid networking including multi-data-centre architecture, cloud migrations (AWS/Azure/VMware Cloud on AWS), BGP/EVPN implementation, and automation with Ansible/Python/Puppet.
Served as Technical Lead for the migration of all corporate DMZ services into a new-generation DMZ architecture. Authored High-Level and Low-Level Designs (HLDs/LLDs) and drove key architectural decisions for VPN, web services, and cross-region connectivity. Served as Network Subject Matter Expert (SME) for the Software-Defined Data Centre (SDDC) programme and pioneering early AWS connectivity initiatives.
Managed day-to-day operations and delivered complex projects across a network of 1,000+ retail sites throughout Central Europe. Acted as design authority and people manager for the regional network team.