DevOps engineer (AWS Networking and Security)

Що робити

• Restrict network access to internal Amazon OpenSearch domains using VPC placement, security groups and access policies
• Redesign VPC and subnet layout so Lambda and ECS workloads route through controlled egress points
• Implement egress controls such as NAT gateways, AWS Network Firewall, VPC endpoints (PrivateLink) and route table changes, per the agreed design
• Tighten security groups and network ACLs to least privilege
• Plan and execute zero-downtime migrations: staged cutovers, traffic validation, tested rollback