Senior Cloud Network Engineer

Location: Bengaluru

About Business Unit:

At the core of all that Epsilon does is a team that sets the foundation of our IT infrastructure. The team drives innovation and efficiency through pioneering technology across Epsilon's platforms and business verticals. From being the first point of contact for infrastructure needs to final deployment, the team provides end-to-end solutions for our client-facing platforms. ETS supports all aspects of revenue-generating platforms for Epsilon and sets the architectural direction for our enterprise deployments.

By adopting the newest technologies, such as Cloud, Automation, and Artificial Intelligence, the team is at the front of redefining our digital business and capturing new opportunities.

How You'll Make an Impact:

As a Senior Cloud Network Engineer, you will own the design, implementation, and operational excellence of Epsilon's cloud-native and hybrid network fabric across AWS, GCP, and Azure. You will translate business and security requirements into scalable, automated network architectures—replacing legacy datacenter patterns with modern cloud equivalents such as Transit Gateway and VPC Lattice, Private Service Connect, Route 53 Resolver endpoints, cloud WAF/CDN edge controls, and zero-trust connectivity models.
In this role, you partner with Cloud Engineering, Security, Platform, and Application teams to deliver reliable connectivity for multi-account, multi-region workloads. You drive incident resolution for complex hybrid and cloud network issues, establish observability and SLOs for network services, and mentor peers on cloud networking best practices. Your work directly improves uptime, security posture, cost efficiency, and developer velocity across internal and client-facing platforms operating in 24x7x365 environments.
This role is ideal for a senior practitioner who combines deep networking fundamentals with hands-on multi-cloud expertise, infrastructure-as-code field, and a passion for building secure, observable, and automatable network platforms.

to view how Epsilon transforms marketing with 1 View, 1 Vision and 1 Voice.

Responsibilities

Design, implement, and operate cloud network architectures across AWS, GCP, and Azure—including hub-and-spoke and mesh connectivity (e.g., AWS Transit Gateway, GCP VPC Network Connectivity Center, Azure Virtual WAN).
Build and maintain hybrid connectivity using Direct Connect, Express Route, Cloud Interconnect, VPN, and modern overlay patterns; optimize for resilience, latency, and cost.
Own DNS strategy and operations in the cloud:
Route 53 hosted zones and Resolver endpoints/rules, Private DNS, split-horizon resolution, forwarding to on-premises, and GCP Cloud DNS / Private DNS zones integrated with Private Service Connect.
Implement and tune edge and application-layer security controls including AWS WAF, AWS Shield, Cloud Front, GCP Cloud Armor, Azure Front Door / Application Gateway WAF, and integration with security tooling and SIEM.
Design private service access patterns: AWS VPC Lattice / Private Link, GCP Private Service Connect, Azure Private Link—enabling secure east-west and north-south traffic without exposing services to the public internet.
Define and enforce network segmentation, micro-segmentation, and zero-trust patterns using security groups, NACLs, cloud firewall policies (e.g., AWS Network Firewall, GCP Firewall Policies, Azure Firewall), and identity-aware access where applicable.
Develop infrastructure-as-code (Terraform, Cloud Formation, or equivalent) for repeatable, auditable network provisioning; participate in CI/CD pipelines for network changes.
Establish monitoring, logging, and tracing for network paths using cloud-native and third-party observability (Flow Logs, VPC Reachability Analyzer, Cloud Monitoring, Net Flow/IPFIX, synthetic probes, and alerting tied to SLOs).
Lead incident response and root-cause analysis for complex connectivity, DNS, TLS, and performance issues across hybrid and multi-cloud environments; drive problem management and blameless postmortems.
Partner with Security on DDoS mitigation, TLS/certificate lifecycle, egress filtering, threat detection integration, and compliance…