Principal Network Engineer

Centersquare•Remote, CA

About The Position

The Principal Network Architect is the highest-level individual contributor in the Network Engineering organization and the technical authority for the entire Phoenix network: its architecture, standards, long-range roadmap, and competitive positioning. This is not a management role. It carries no headcount. Roughly 60% of focus goes to the inter-metro backbone program and carrier hotel expansion — architecture, design documentation, stitching strategy, peering and interconnection planning, service definition, and implementation guidance. The remaining 40% covers architecture governance, joint development of the long-range technology roadmap in close partnership with the Sr. Director of Network Engineering, resiliency and security architecture, standards enforcement, vendor strategy, and escalation support. Output is always specific and tangible: design documents, reference architectures, MOPs, gap analyses, service definitions, and clear technical requirements handed to the engineering and automation teams.

Requirements

15–20+ years of progressive network engineering and architecture experience, with 5–8+ years at Principal, Sr. Principal, or equivalent architect level in a service-provider, carrier-neutral data center, or hyperscale environment.
Production-proven expertise in EVPN/VXLAN fabric design at data-center scale and expert-level MPLS mastery including SR-MPLS and SRv6 (traffic engineering, flex-algo, TI-LFA, BGP-CT).
Deep BGP experience: route reflectors, confederations, complex policy design, multi-protocol BGP (EVPN, labeled unicast, Flowspec), and large-scale routing table management.
Proven track record designing and deploying multi-metro or service-provider backbone networks, including EVPN-to-MPLS stitching, inter-domain connectivity, and carrier hotel or IXP integration.
Direct experience with internet peering and interconnection: IXP participation, BGP peering policy, public and private peering architecture, and route server integration.
Cloud on-ramp design experience: AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, or equivalent integrated into a backbone routing domain.
Working knowledge of network security architecture: BGP control plane security, RPKI/ROA, DDoS mitigation (RTBH, Flowspec), and macro/micro-segmentation within EVPN/VXLAN.
Sufficient depth in network automation and NetDevOps to provide precise, actionable requirements to an automation engineer: provisioning logic, SR policy management, EVPN service state, and zero-touch provisioning goals.
Exceptional written and verbal communication: publication-quality design documents and the ability to present ROI, risk, and architecture trade-offs to C-level audiences.

Nice To Haves

Direct experience at a carrier-neutral colocation or interconnection provider with responsibility for peering infrastructure, customer connectivity, or backbone architecture.
Background at a major service provider, hyperscaler, or CDN with backbone or interconnection scope.
Expert-level certification: CCIE (RS, SP, or DC track), JNCIE-SP, or JNCIE-DC.
Experience with AI/HPC fabric design and lossless transport requirements for GPU clusters.
Experience defining network service catalogs and working with product and commercial teams to bring connectivity products to market.

Responsibilities

Design and own the end-to-end architecture for the multi-metro SR/MPLS backbone, including EVPN/VXLAN-to-MPLS stitching strategy, traffic engineering, TI-LFA fast-reroute, capacity planning, and resiliency design.
Define the carrier hotel entry strategy across priority US markets — transport options, SR/MPLS stitching profiles, and peering architecture — in close collaboration with the Optical Architect.
Produce all design documents, MOPs, SOPs, and operational runbooks required for backbone deployment and ongoing operations.
Build the peering and interconnection strategy: IXP participation, BGP peering policy, public and private peering architecture, route server integration, and cloud on-ramp design (AWS Direct Connect, Azure ExpressRoute, Google Cloud Interconnect, OCI FastConnect).
Define the network service catalog — virtual cross-connects, private peering, internet exchange access, and cloud on-ramps — and specify the provisioning architecture the Network Automation Engineer and Portal team will build against.
Partner with Product Management to translate capabilities into defined service tiers with SLAs grounded in real architecture.
Own the carrier-grade resiliency architecture targeting 99.999% availability: failure domain modeling, redundancy strategy, fast-reroute design, and protection switching at every layer.
Define the zero-trust security architecture, DDoS mitigation approach (RTBH, Flowspec, scrubbing integration), and macro/micro-segmentation model within EVPN/VXLAN tenants.
Enforce architecture governance: conduct structured reviews of all major proposed changes to topology, routing design, or platform selection; publish and maintain reference architectures and configuration standards across all network domains.
Work in close partnership with the Sr. Director of Network Engineering to define, build, and maintain the 3–5 year network technology roadmap: what gets built, replaced, or deferred and why.
Define the vendor and platform strategy, evaluate emerging technologies (SRv6 evolution, AI-assisted operations, P4 programmable forwarding, next-generation coherent optical), and engage vendors at the engineering and product roadmap level.
Act as the technically demanding internal customer for automation and observability: define provisioning logic, SR policy management requirements, self-healing behavior specifications, and observability requirements.
Serve as Tier-4 technical authority and final escalation for complex production issues across backbone, metro fabrics, optical transport, and carrier hotel connectivity.
Mentor senior engineers through design reviews and direct technical collaboration.
Lead architecture review boards and structured knowledge-sharing on backbone technologies, SR/MPLS, peering, security design, and automation patterns.