Overview

We're seeking an accomplished Chief Site Reliability Engineer to join our organization. Our team drives the network engineering efforts that enable connectivity across Google Cloud, AWS, Azure, and the networks belonging to our external partners. We link the different cloud environments through a private interconnect fabric, position next-generation firewalls directly within the traffic flow, and manage nearly the entirety of this setup programmatically. We also own the secure access layer that connects our employees to the internet and to internal systems, relying on Zscaler, Menlo Security, and Tailscale.

Currently, we're in the process of building a new hub-and-spoke network inside Google Cloud and linking it with the broader environment. In parallel, we're creating internal tooling that transforms live network data into clear, actionable insight during incident response.

Responsibilities

  • Build and adjust cloud network configurations through Terraform, encompassing VPCs and VNets, transit hubs such as GCP Network Connectivity Center, AWS Transit Gateway, and Azure Virtual WAN, private service access using Private Service Connect, PrivateLink, or Private Endpoints, plus the routing linking all these pieces together
  • Administer private interconnects such as Equinix Fabric, Cloud Interconnect, Direct Connect, and ExpressRoute, together with the BGP sessions running across them, handling circuit provisioning, routing policy tuning, and failover validation
  • Govern firewall policy spanning cloud-native firewalls as well as Palo Alto NGFWs operated via Panorama, managing every change from initial review through final deployment
  • Maintain the secure access technology suite, including Zscaler, Menlo Security browser isolation, Tailscale, and the PAC files that route traffic among them, while implementing policy changes and troubleshooting connectivity concerns for users
  • Address connectivity and performance problems by examining flow logs, firewall logs, BGP state information, and synthetic monitoring output from platforms such as ThousandEyes, participating in on-call duties and documenting discoveries
  • Improve and expand Python-based tooling used to compare live network state against the desired configuration
  • Assess merge requests submitted by team members and keep runbooks and design documentation current and accurate

Requirements

  • A minimum of 7 years of relevant network engineering background, including direct experience building production-grade networks within a public cloud platform such as GCP, AWS, or Azure, with strong depth in one platform and a willingness to expand into others considered sufficient
  • At least 2 years spent managing or directing development teams
  • Firm grasp of routing principles, including explaining how BGP arrives at a best path, how elements like AS-path, MED, and local preference shape that decision, and how to pinpoint why an anticipated route is missing
  • Hands-on familiarity with Terraform or equivalent infrastructure-as-code tools used within a Git-based review process
  • Demonstrated experience with network security mechanisms, including firewall rules, security groups, NAT, and segmentation strategies
  • Adequate Python competency to automate recurring tasks or extract data via a cloud API
  • A disciplined, data-driven troubleshooting methodology, involving forming hypotheses, validating them against evidence, and logging results
  • Excellent writing ability, producing change plans, incident documentation, and reference materials that fellow engineers can trust
  • Upper-Intermediate English language competency (B2)

Nice to have

  • Knowledge of Google Cloud networking features such as Network Connectivity Center, Cloud Router, Cloud Interconnect, VPC Service Controls, hierarchical firewall policies, and Organization Policy / IAM Deny
  • Background with Equinix Fabric or another similar interconnect or network-as-a-service offering
  • Experience working with Palo Alto NGFW and Panorama, particularly VM-Series instances deployed in cloud environments
  • Familiarity with Zscaler (ZIA/ZPA) or a comparable secure web gateway or zero-trust access platform, Menlo Security or a similar browser isolation solution, and Tailscale or other WireGuard-based access tools
  • Awareness of BFD and BGP graceful restart concepts, along with experience architecting and confirming failover designs
  • Experience leveraging network monitoring solutions such as ThousandEyes
  • Possessing relevant certifications, such as Google Professional Cloud Network Engineer or comparable AWS credentials, which would be regarded as a strong advantage

Benefits (generic, except India)

  • International projects with top brands
  • Work with global teams of highly skilled, diverse peers
  • Healthcare benefits
  • Employee financial programs
  • Paid time off and sick leave
  • Upskilling, reskilling and certification courses
  • Unlimited access to the LinkedIn Learning library and 22,000+ courses
  • Global career opportunities
  • Volunteer and community involvement opportunities
  • •••• Employee Groups
  • Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn