Principal Engineer, Platform Engineering
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Full time
- Experience
- Not specified
- Category
- Devops
- Posted
Skills
Nice to have
- Experience across AWS, GCP, and Azure.
- AWS Transit Gateway, Cloud WAN, Direct Connect, PrivateLink, Route 53, or equivalent cloud-network technologies.
- GCP Cloud Router, Interconnect, Shared VPC, Private Service Connect, or equivalent technologies.
- Azure Virtual WAN, ExpressRoute, Private Link, or equivalent technologies.
- BGP and hybrid cloud/data-center networking.
- Tailscale, Headscale, WireGuard, or comparable private-access technologies.
- NetBox or other IPAM/DCIM platforms.
- Kubernetes CNI or advanced Kubernetes networking experience.
- Grafana, Prometheus, Mimir, Loki, CloudWatch, PagerDuty, Pingdom, or comparable observability tools.
- Experience with IAM and identity technologies such as Okta, Keycloak, FreeIPA, OIDC, SAML, SCIM, JIT access, certificates, secrets management, or privileged-access systems.
- Experience building policy-as-code, infrastructure guardrails, or automated deployment controls.
- Experience in large multi-account, multi-project, hybrid-cloud, or enterprise-scale infrastructure environments.
Full description
Position overview
SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of the network foundations supporting our engineering organization.
This is a senior hands-on technical role spanning cloud networking, site reliability engineering, infrastructure automation, and platform architecture across AWS, GCP, Azure, and internal infrastructure.
The ideal candidate combines deep networking expertise with strong software and infrastructure engineering skills. They should be comfortable operating across organizational boundaries, driving technical decisions, improving reliability, and identifying adjacent problems that need ownership rather than limiting themselves strictly to a predefined scope.
This role also provides senior technical coverage during U.S. business hours and acts as a key architecture partner to Platform Engineering, Systems Engineering, IT, InfoSec, and product engineering teams.
What you’ll do:
- Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure.
- Design and evolve routing, segmentation, firewalls, NAT, ingress/egress, DNS, VPN, private connectivity, and cloud-to-data-center networking.
- Lead technical direction for private-access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns.
- Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services.
- Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation.
- Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies.
- Build reusable infrastructure patterns and automation that enable safe self-service for platform and engineering teams.
- Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices.
- Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture that crosses networking, infrastructure, identity, security, and reliability domains.
- Serve as a senior technical escalation point during U.S. business hours.
- Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject-matter experts.
- Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization.