Principal Cloud Network Engineer

What you'll do

• Define and evolve enterprise cloud network architecture across AWS, GCP, and Azure
• Establish multi-account landing zone network standards
• Design private service access patterns at scale
• Architect zero-trust network access and identity-aware connectivity patterns
• Own hybrid connectivity strategy and optimize for resilience, latency, throughput, and cost
• Define and govern enterprise DNS strategy in the cloud
• Lead design reviews for complex routing, BGP, and cross-cloud connectivity scenarios
• Define standards for edge and application-layer security controls
• Establish network segmentation and micro-segmentation models
• Partner with Security on DDoS mitigation, TLS lifecycle, egress filtering, and compliance
• Drive infrastructure-as-code standards and govern CI/CD pipelines for network provisioning
• Develop and support network automation in Python
• Design self-service and platform automation patterns
• Define network observability architecture and alerting frameworks
• Champion automation and operational maturity across the network engineering function
• Guide platform networking for container and Kubernetes workloads
• Lead network modernization and platform initiatives
• Mentor senior network engineers and architects
• Delegate and coordinate implementation and operational tasks
• Lead incident command and root-cause analysis for complex network issues
• Own network documentation, architecture diagrams, runbooks, and enterprise standards
• Apply FinOps principles to network cost strategy
• Participate in on-call rotation and provide after-hours support

Requirements

• 10+ years of experience in network engineering or infrastructure roles
• 5+ years focused on cloud networking in large-scale production environments
• Expert-level understanding of TCP/IP, routing, switching, BGP, VPN, DNS, TLS, and load balancing
• Deep hands-on experience designing and operating AWS networking and comparable services in GCP and Azure
• Experience with multi-account landing zones with centralized egress and cross-account connectivity governance
• Expert proficiency with infrastructure-as-code (Terraform preferred) and policy-as-code for network security controls
• Strong Python development experience for automation and API-driven services
• Experience defining network observability, SLOs, capacity planning, and operational metrics
• Ability to lead technical initiatives, mentor senior engineers, and delegate work
• Ability to lead troubleshooting across all network layers and communicate effectively
• Experience in regulated or security-sensitive environments with change management and audit-ready documentation
• Self-directed with strong prioritization skills in 24x7 operational contexts
• Willingness to participate in after-hours on-call rotation

Tech stack

Benefits