Principal Software Engineer

Responsibilities:

• Architect, deploy, and manage secure, resilient cloud network infrastructures across AWS, Azure, and Google Cloud Platform (GCP).
• Configure and administer cloud-native firewalls, including AWS Network Firewall, Azure Firewall, and Google Cloud Firewall.
• Design and manage VPCs, subnets, routing, and security groups for optimal scalability and security.
• Lead and execute workload and application migrations to cloud environments behind firewalls, ensuring seamless performance and compliance.
• Develop and manage Infrastructure as Code (IaC) using Terraform, integrating infrastructure provisioning into CI/CD pipelines.
• Collaborate with DevOps teams to automate deployments, configuration management, and monitoring across multi-cloud environments.
• Contribute to continuous improvement by implementing best practices in automation, scalability, and operational efficiency.
• Design and enforce cloud network security policies leveraging AWS Security Hub, Azure Security Center, and GCP Security Command Center.
• Conduct regular firewall and network configuration audits to ensure compliance with internal and regulatory standards.
• Proactively monitor, troubleshoot, and resolve network-related security incidents.
• Monitor, analyze, and optimize cloud network performance across hybrid and multi-cloud environments.
• Collaborate with cloud architects, DevOps engineers, and application teams to align network designs with business and application requirements.
• Research and recommend emerging tools and best practices to improve network performance, resilience, and security posture.

Requirements:

• Bachelor's degree in computer science, software engineering, or a related field.
• 10+ years of proven experience in multi-cloud network engineering and automation.

Must Have Skills:

• Proficient in cloud networking concepts across AWS, Azure, and GCP.
• Proven experience with workloads and applications behind cloud-native firewalls.
• Strong understanding of network protocols (TCP/IP, BGP, DNS, HTTP, SSL) and security principles.
• Proficiency in hybrid connectivity solutions: Direct Connect, ExpressRoute, VPC Peering, Private Link, and Private Endpoints.
• Expertise in both IPv4 and IPv6 networking.
• Hands-on experience in creating and managing Grafana dashboards.
• Experience with monitoring and observability tools like CloudWatch, Azure Monitor, GCP Operations Suite, Prometheus, or Datadog.
• Proficiency in KQL (Kusto Query Language) for advanced log and telemetry analysis.
• Proficiency with Terraform and version control tools such as Git.
• Experience with CI/CD pipelines and container orchestration platforms such as Kubernetes (EKS, AKS, GKE, PKS, or OpenShift).
• Experience in automation using Python and/or Shell scripting.

Nice-to-Have:

• AWS Certified Advanced Networking - Specialty.
• Microsoft Certified: Azure Network Engineer Associate.
• HashiCorp Certified: Terraform Associate.

Skills

AWS, Azure, Azure Firewall, GCP, Google Cloud Firewall, Google Cloud Platform, Network Firewall, Terraform, firewall