Principal Engineer, Platform Engineering

SingleStore

About The Position

SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of network foundations supporting its engineering organization. This senior, hands-on technical role spans cloud networking, site reliability engineering, infrastructure automation, and platform architecture across AWS, GCP, Azure, and internal infrastructure. The role calls for deep networking expertise combined with strong software and infrastructure engineering skills. The engineer will work across organizational boundaries, drive technical decisions, improve reliability, and take ownership of adjacent problems as needed. They will provide senior technical coverage during U.S. business hours and partner on architecture with Platform Engineering, Systems Engineering, IT, InfoSec, and product engineering teams.

Requirements

Deep experience designing and operating complex production cloud networks in at least one major cloud provider, with meaningful experience in a second.
Strong knowledge of routing, subnetting, segmentation, firewalls, NAT, DNS, VPN, ingress and egress, and private connectivity.
Demonstrated experience troubleshooting complex production network and infrastructure failures.
Strong hands-on experience with Terraform, OpenTofu, Terragrunt, or comparable infrastructure-as-code technologies.
Experience building infrastructure automation using Python, Go, or a comparable programming language.
Strong SRE experience including observability, incident response, root-cause analysis, recovery engineering, and reliability improvement.
Experience operating Kubernetes or adjacent cloud-platform infrastructure.
Experience designing safe infrastructure change and deployment practices.
Ability to lead architecture decisions across multiple engineering organizations without formal authority.
Strong written and verbal communication skills, including architecture documents, standards, runbooks, and incident reviews.
Demonstrated ability to mentor engineers, distribute technical knowledge, and influence technical direction at Principal level.

Nice To Haves

Experience across AWS, GCP, and Azure.
AWS Transit Gateway, Cloud WAN, Direct Connect, PrivateLink, Route 53, or equivalent cloud-network technologies.
GCP Cloud Router, Interconnect, Shared VPC, Private Service Connect, or equivalent technologies.
Azure Virtual WAN, ExpressRoute, Private Link, or equivalent technologies.
BGP and hybrid cloud/data-center networking.
Tailscale, Headscale, WireGuard, or comparable private-access technologies.
NetBox or other IPAM/DCIM platforms.
Kubernetes CNI or advanced Kubernetes networking experience.
Grafana, Prometheus, Mimir, Loki, CloudWatch, PagerDuty, Pingdom, or comparable observability tools.
Experience with IAM and identity technologies such as Okta, Keycloak, FreeIPA, OIDC, SAML, SCIM, JIT access, certificates, secrets management, or privileged-access systems.
Experience building policy-as-code, infrastructure guardrails, or automated deployment controls.
Experience in large multi-account, multi-project, hybrid-cloud, or enterprise-scale infrastructure environments.

Responsibilities

Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure.
Design and evolve routing, segmentation, firewalls, NAT, ingress and egress, DNS, VPN, private connectivity, and cloud-to-data-center networking.
Lead technical direction for private-access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns.
Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services.
Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation.
Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies.
Build reusable infrastructure patterns and automation that enable safe self-service for platform and engineering teams.
Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices.
Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture crossing networking, infrastructure, identity, security, and reliability domains.
Serve as a senior technical escalation point during U.S. business hours.
Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject-matter experts.
Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization.
Identify architectural and operational gaps beyond the immediate networking domain and help drive them to resolution.