Apply on Employer Site

Nakupuna Companies · 4 hours ago

Amazon Web Services (AWS) Network Administrator

US-HI-Honolulu

Full-time

Onsite

Mid Level

3+ years exp

Nakupuna Consulting is seeking a motivated AWS Network Administrator to design, deploy, and operate secure, highly available cloud network environments supporting mission-critical workloads. The role focuses on building and optimizing connectivity from enterprise Cloud Access Points into the AWS Secure Cloud Computing Architecture, collaborating with various teams to support business needs and advance AWS networking best practices.

Environmental ConsultingInformation TechnologyManagement Consulting

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design, operate, and continuously improve AWS network architectures using VPCs, subnets, routing, and traffic controls that emphasize availability, predictable performance, and scalability

Configure and maintain VPN connections, Direct Connect, and other connectivity solutions within AWS, including establishing and managing VPC peering relationships

Operate and enhance AWS Transit Gateway architectures to simplify routing, reduce operational complexity, and support future growth

Apply routing and segmentation strategies that improve fault isolation and support secure scaling

Monitor, analyze, and troubleshoot traffic flow patterns to identify performance bottlenecks, optimize throughput, and maintain compliance with SCCA standards

Implement AWS network security controls aligned with defense-in-depth and least-privilege principles

Support DoD STIG reviews and remediation activities to ensure environments remain secure by design and compliant by default

Integrate AWS security and observability services such as GuardDuty and CloudWatch with Splunk for centralized monitoring, alerting, and incident response

Maintain meaningful logs and telemetry to support investigations, audits, and operational insight

Administer and support Forescout for secure network access and control in cloud environments

Collaborate with senior engineers and DISA to enable secure, compliant connectivity between AWS GovCloud and DoD enterprise networks

Configure and maintain Out-of-Band Management (OOBM) to ensure environments remain operable during incidents or degraded conditions

Develop and maintain documentation including Standard Operating Procedures (SOPs), diagrams, and System Security Plans (SSPs)

Qualification

AWS networking servicesNetwork security controlsNetwork protocolsScripting languagesAWS certificationsAnalytical skillsTechnical writingEffective communicationDecision-makingOrganizational skills

Required

Excellent technical, organizational, decision-making, analytical, writing and planning skills

Effective communicator who takes initiative and the ability to adapt to dynamic environments

Proven experience as a network administrator or engineer with hands-on experience in designing and managing network infrastructure in AWS

Strong understanding of AWS networking services including VPC, Elastic Compute Cloud (EC2), Elastic Load Balancer (ELB), Route 53, Transit Gateway, and CloudWatch

Understanding of the following AWS Services: GuardDuty, Security Hub, AWS Inspector, AWS IAM Access Analyzer, AWS Detective, Cloudwatch, CloudTrail, Athena, Cloud Formation, Terraform

Strong knowledge of network protocols (TCP/IP, DNS, DHCP, BGP, etc.) and networking concepts

Experience securing environments using firewalls, VPNs, IDS/IPS, and related technologies

Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation tasks

Bachelor's degree in a technical major from an accredited institution as well as a minimum of (3) three years of relevant professional experience

Equivalent years of related work or military experience in lieu of degree will also be considered

Active IAT II Certification which may include CompTIA Advanced Security Practitioner (CASP+), CompTIA Cybersecurity Analyst (CySA+), Certified Information Systems Security Professional (CISSP), or CompTIA Security+

Must currently hold an active Top Secret level of security clearance

Must be a U.S. citizen