Principal Network Engineer

Job Description

Designs, implements, and operates resilient L3/L4 network services across data centers and cloud environments with broader influence beyond the immediate team. Leads moderately complex projects, drives automation and observability at scale, and contributes to standards and architectures. Mentors junior engineers, provides input on team decisions, and collaborates with SRE, platform, and security partners to deliver secure, compliant, and highly available network services with measurable impact on both team and group outcomes.

Designs, implements, and operates resilient L3/L4 network services across data centers and cloud environments with broader influence beyond the immediate team. Leads moderately complex projects, drives automation and observability at scale, and contributes to standards and architectures. Mentors junior engineers, provides input on team decisions, and collaborates with SRE, platform, and security partners to deliver secure, compliant, and highly available network services with measurable impact on both team and group outcomes.

Designs, implements, and operates resilient L3/L4 network services across data centers and cloud environments with broader influence beyond the immediate team. Leads moderately complex projects, drives automation and observability at scale, and contributes to standards and architectures. Mentors junior engineers, provides input on team decisions, and collaborates with SRE, platform, and security partners to deliver secure, compliant, and highly available network services with measurable impact on both team and group outcomes.

• Lead designs for IP addressing, routing policies (BGP/OSPF/IS-IS), EVPN/VXLAN fabrics, and SDN overlays spanning on-prem and cloud.
• Define HA, ECMP, and traffic-engineering patterns; validate through lab/sandbox testing, failure modeling, and staged rollouts.
• Author design docs and drive reviews involving related teams; de-risk changes with method-of-procedure (MOP), rollback, and verification plans.

• Implement and operate VPC/VNet topologies, subnets, routing tables, NAT, Transit/Hub-and-Spoke (e.g., TGW/VCN), Private Link/service endpoints, and inter-cloud connectivity.
• Design and tune L4/L7 load balancing and service insertion (proxies, firewalls) to meet defined SLOs and cost targets.
• Ensure consistent network policy and connectivity across environments using standard blueprints and golden configs.

• Engineer segmentation (VRFs/security zones), ACLs/policies, encryption (IPsec/TLS), and DDoS/WAF integrations aligned to zero-trust.
• Embed compliance guardrails (change control, access least privilege, evidence collection) and partner with security/GRC to pass audits.
• Periodically review rulebases and routing policies; eliminate shadow/duplicate rules and reduce attack surface.

• Develop reusable Terraform modules and Ansible playbooks; enforce code reviews, linting, policy-as-code, and test gates in pipelines.
• Build validation and drift-detection tooling using APIs and scripting (e.g., Python); integrate automated rollbacks and canary changes.
• Champion Git Ops practices, configuration data modeling, and inventory source of truth.

• Implement SNMP/streaming telemetry, Net Flow/IPFIX, and flow logs for health, capacity, and security analytics.
• Define SLIs/SLOs (availability, latency, loss, jitter) and build dashboards/alerts/runbooks; lead capacity/perf reviews and right-sizing actions.
• Correlate telemetry with incidents; drive problem management and reduction of repeat issues.

• Partner with SRE, platform, and security teams on architecture reviews, incident response, post-incident remediation, and capacity planning.
• Lead portions of on-call response and complex change events; coordinate with related teams to minimize risk and downtime.
• Contribute to cross-LOB standards, reference architectures, and service onboarding…