Note: The job is a remote job and is open to candidates in USA. SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of network foundations supporting its engineering organization. The role spans cloud networking, site reliability engineering, infrastructure automation, and platform architecture across cloud providers and internal infrastructure, while partnering with engineering and security teams.
Responsibilities
- Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure
- Design and evolve routing, segmentation, firewalls, NAT, ingress/egress, DNS, VPN, private connectivity, and cloud-to-data-center networking
- Lead technical direction for private-access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns
- Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services
- Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation
- Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies
- Build reusable infrastructure patterns and automation that enable safe self-service for platform and engineering teams
- Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices
- Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture that crosses networking, infrastructure, identity, security, and reliability domains
- Serve as a senior technical escalation point during U.S. business hours
- Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject-matter experts
- Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization
- Identify architectural and operational gaps beyond the immediate networking domain and help drive them to resolution
Skills
- Deep experience designing and operating complex production cloud networks in at least one major cloud provider, with meaningful experience in a second
- Strong knowledge of routing, subnetting, segmentation, firewalls, NAT, DNS, VPN, ingress/egress, and private connectivity
- Demonstrated experience troubleshooting complex production network and infrastructure failures
- Strong hands-on experience with Terraform, OpenTofu, Terragrunt, or comparable infrastructure-as-code technologies
- Experience building infrastructure automation using Python, Go, or a comparable programming language
- Strong SRE experience including observability, incident response, root-cause analysis, recovery engineering, and reliability improvement
- Experience operating Kubernetes or adjacent cloud-platform infrastructure
- Experience designing safe infrastructure change and deployment practices
- Ability to lead architecture decisions across multiple engineering organizations without formal authority
- Strong written and verbal communication skills, including architecture documents, standards, runbooks, and incident reviews
- Demonstrated ability to mentor engineers, distribute technical knowledge, and influence technical direction at Principal level
- Experience across AWS, GCP, and Azure
- AWS Transit Gateway, Cloud WAN, Direct Connect, PrivateLink, Route 53, or equivalent cloud-network technologies
- GCP Cloud Router, Interconnect, Shared VPC, Private Service Connect, or equivalent technologies
- Azure Virtual WAN, ExpressRoute, Private Link, or equivalent technologies
- BGP and hybrid cloud/data-center networking
- Tailscale, Headscale, WireGuard, or comparable private-access technologies
- NetBox or other IPAM/DCIM platforms
- Kubernetes CNI or advanced Kubernetes networking experience
- Grafana, Prometheus, Mimir, Loki, CloudWatch, PagerDuty, Pingdom, or comparable observability tools
- Experience with IAM and identity technologies such as Okta, Keycloak, FreeIPA, OIDC, SAML, SCIM, JIT access, certificates, secrets management, or privileged-access systems
- Experience building policy-as-code, infrastructure guardrails, or automated deployment controls
- Experience in large multi-account, multi-project, hybrid-cloud, or enterprise-scale infrastructure environments
Company Overview
Company H1B Sponsorship