Note: The job is a remote job and is open to candidates in USA. Dice is seeking a Principal Network Engineer-Cloud Engineer who will be responsible for architecting and delivering cloud-native network solutions in large-scale multi-cloud environments. The role emphasizes designing secure network architectures for SaaS applications and leading the integration of advanced security practices across the organization.
Responsibilities
- Lead the development and enforcement of comprehensive policies and standards, integrating advanced security practices throughout the network infrastructure to mitigate risks and align with industry-leading security protocols
- Drive security awareness across the organization
- Collaborate with Engineering and Business teams to develop secure engineering practices
- Act as a pivotal technology leader, driving the integration of network and secure engineering practices across the organization while liaising with senior management to ensure a cohesive strategy that aligns with business objectives
- Architect, design, and implement secure end-to-end network solutions across multi-cloud environments (Google Cloud Platform, AWS, on-premises, and colocation), ensuring seamless integration and consistent policy enforcement
- Lead the design and development of Google Cloud Platform-native network architectures, including:
- Shared VPC models and network segmentation strategies
- Private Service Connect and private access to PaaS/SaaS services
- Cloud Load Balancing architectures (L4/L7, internal/external)
- Hybrid connectivity (Dedicated/Partner Interconnect, VPN)
- Define and implement network patterns for SaaS platforms, including:
- Multi-tenant isolation models
- Zero-trust access patterns
- North-south and east-west traffic control strategies
- Ensure network designs support application-layer requirements, including latency sensitivity, service discovery, API gateway integration, and resiliency patterns
- Spearhead the evaluation and strategic deployment of cutting-edge network solutions, emphasizing scalability, performance, and adaptability, to fortify the organization’s defense against evolving threats
- Participate in operational on-call duties to support a 24/7 infrastructure across multiple regions and environments (cloud, on-premises and colocation)
- Lead by example in incident response situations, orchestrating rapid and effective responses while leveraging these experiences to bolster future resilience and response strategies
- Demonstrated leadership skills with developing a comprehensive mentorship program for other engineers, including organizing regular training sessions to elevate the team’s technical and security skills. This role requires a commitment to fostering a culture of continuous improvement and knowledge sharing
- Proven track record with participation in research and the exploration of next-generation network and security architectures, tools and practices. This includes encouraging the team to engage with the wider technical network and security community, contributing to open-source projects, and staying well-informed of emerging threats and innovative defense mechanisms
- Drive the network architecture strategy, ensuring alignment with SaaS platform evolution, cloud adoption, and enterprise security standards (HIPAA/NIST)
- Partner with platform, DevOps, and application engineering teams to standardize reusable network design patterns for cloud-native and SaaS workloads
- Establish reference architectures and guardrails for Google Cloud Platform and multi-cloud networking to ensure consistency, compliance, and scalability
- Also play a key role in the strategic planning of the organization’s roadmap, including conducting thorough risk assessments, allocating budgets for network and security initiatives, and aligning long-term strategies with overarching business goals. This responsibility includes advocating for network and security within the company and ensuring that security considerations are paramount in all technology decisions
Skills
- 10+ years in network engineering, with at least 5 years in a leadership or architectural role
- A minimum of a Bachelor's degree in Computer Science, Electronic Engineering, Software Engineering, or a related field, or equivalent alternative education, skills, and/or practical experience is required
- Proven track record in leading network and cloud initiatives from inception through to successful deployment, demonstrating exceptional project management skills and the ability to navigate complex stakeholder landscapes
- Deep expertise in Google Cloud Platform (Google Cloud Platform) networking, including: VPC design (auto/custom mode, shared VPC, service projects), Private Service Connect, VPC Service Controls, Cloud DNS, Cloud NAT, Cloud Router, F5 and Google Cloud Platform load balancing (HTTP(S), TCP/SSL proxy, internal LB)
- Strong understanding of SaaS architecture principles, including: Multi-tenancy models (pooled, siloed, hybrid), Secure service exposure and ingress/egress design, Identity-aware networking and service-to-service authentication
- Experience designing networks for containerized and cloud-native platforms (GKE, service mesh, ingress controllers)
- Enterprise routing, switching and protocols (BGP, OSPF, MPLS, STP etc.) and technologies (Cisco, Juniper, Palo Alto, Arista, etc.)
- Network security technologies: PAN firewalls/NGFW, IDS/IPS, NAC, ZTNA, DLP, SIEM
- Network and application-centric security tools and concepts (e.g., NGFW, micro-segmentation, service mesh)
- Designing Layer 2/3 topologies, including leaf-spine architectures, including data center fabric technologies (e.g., VXLAN, EVPN, TRILL) and with the ability to design for high availability, redundancy, and scalability
- Cisco SD-WAN, VPN, remote access, and hybrid connectivity
- Network monitoring and performance tools (e.g., SolarWinds, NetFlow, Wireshark)
- Experience designing network architectures for AI/ML or high-performance workloads, including GPU-enabled environments across cloud and colocation
- Familiarity with cloud-native security frameworks (BeyondCorp, zero trust networking in Google Cloud Platform/AWS)
- Experience supporting SaaS platform scaling and global traffic management, including geo-distributed architectures
- Experience with network automation and Infrastructure as Code (Terraform, KCC)
- Familiarity with network virtualization (NSX, Cisco ACI, VMware NSX)
- Background in high-availability and disaster recovery design
- Strong technical expertise with Networking and Software-Defined Networking (SDN) principles
- Strong technical expertise with developing and interpreting Network, Sequence, and Dataflow diagrams
- Experience with direct, remote, and virtual teams
- Understanding of at least one compliance framework (HIPAA, HITRUST, PCI, NIST, CSA)
- Strong technical expertise in defining and implementing cyber resilience standards, policies, and programs for distributed cloud and network infrastructure, ensuring robust redundancy and system reliability
- Experience in influencing industry standards and contributing to open-source projects or security communities, highlighting a broader impact beyond the immediate organization
Company Overview
Company H1B Sponsorship