Senior Associate AWS Cloud Network Engineer
Amgen
- Location
- Portugal - Lisbon
- Work model
- On-Site
- Level
- Mid
- H-1B history
- 137 approvals (FY2023)
- Posted
- Sep 14, 2026
Skills
About this role
Career Category Information Systems Job Description Join our team at AMGEN Capability Center Portugal , consistently recognized among the top companies in the Best Workplaces™ ranking by Great Place to Work® in Portugal. In 2026, we were once again distinguished as one of the top Best Workplaces in the country (category 201–500 employees), reinforcing our commitment to an exceptional employee experience and workplace culture. We are a team of over 500 talented individuals, spanning more than 30 functions and areas of expertise, and representing over 40 nationalities. Together, we bring diverse perspectives and professional backgrounds to help shape the future of healthcare through innovation and technology. This is your opportunity to explore a world of possibilities across areas such as Data & Analytics, Digital, Technology & Innovation, Cybersecurity, R&D Operations, Global Distribution, Finance, Regulatory Affairs, General & Administrative, Human Resources, and many more. Located in the heart of Lisbon, our AMGEN office fosters a culture of innovation, excellence, and purpose. Come thrive with us at AMGEN, supporting our mission To Serve Patients. What we do at AMGEN matters in people’s lives. Senior Associate AWS Cloud Network Engineer At AMGEN, Technology isn’t just a support function—it’s a catalyst for discovery, transformation, and real-world impact. Here, your ideas fuel innovation that improves and saves lives of patients in dire need of our medicines. Are you ready to do meaningful work that matters? LIVE WHAT YOU WILL DO We are seeking a highly experienced Senior Associate AWS Cloud Network Engineer to join the Cloud Networking team and help design, implement, operate, and continuously improve a large-scale enterprise AWS network environment. This role will be responsible for delivering secure, resilient, scalable, and highly available cloud-networking capabilities across a multi-account, multi-region AWS environment. The engineer will work across AWS networking, enterprise network integration, cloud security, DNS, routing, connectivity, and application enablement. The successful candidate will bring strong hands-on experience with AWS networking and a solid foundation in enterprise networking technologies. This person must be comfortable troubleshooting complex end-to-end connectivity issues involving AWS, on-premises infrastructure, routing protocols, firewalls, DNS, and application dependencies. The position will work closely with Cloud Platform, Enterprise Network, Cybersecurity/Network Security, Infrastructure, application engineering, and other technology teams. Roles & Responsibilities: Cloud Network Architecture & Engineering Design, implement, and support AWS network architectures using Amazon VPC, shared VPC architectures, Transit Gateway, subnetting, route tables, VPC peering, PrivateLink, VPC endpoints, AWS Route53 and related AWS networking services . Implement secure and scalable multi-account and multi-region networking patterns. Develop and maintain cloud network standards, reusable architectures, and engineering patterns. Support network segmentation and controlled traffic flows across application, platform, shared-service, and security domains. Participate in architecture reviews and provide cloud-networking guidance for new applications and platform migrations. Hybrid Connectivity Design, implement, and troubleshoot connectivity between AWS and enterprise/on-premises environments. Work with AWS Direct Connect, Site-to-Site VPN, BGP, route propagation, routing domains, and hybrid connectivity patterns . Troubleshoot complex traffic paths across AWS, Direct Connect, enterprise routing, firewalls, and security controls. Partner with Enterprise Network teams on cloud/on-premises routing boundaries and connectivity changes. DNS & Network Services Implement and support Amazon Route 53, Route 53 Resolver, private hosted zones, inbound/outbound DNS resolution, and