Senior Cloud Network Engineer

Nubank•Palo Alto, CA

1d•Hybrid

About The Position

As a Senior Cloud Network Engineer on Nubank’s Cloud Network platform engineering team, you will design, build, and operate the cloud network relied on by the company’s engineering teams. You will treat the network as software: automated, tested, and versioned. This is an IC5 individual-contributor role, leading through technical depth, design quality, and influence rather than direct reports. You will work in a global engineering organization with teammates across countries, so English collaboration is part of everyday work. The role focuses on evolving connectivity across multi-account, multi-region, and hybrid-cloud topologies; building and operating network infrastructure as code; maintaining operational health and safe change practices; and ensuring observability, security, auditability, scalability, maintainability, and cost efficiency. The position is offered in Miami or Palo Alto, USA, under a hybrid model requiring office attendance at least twice a week.

Requirements

Production experience with public cloud networking, preferably AWS, including Transit Gateway, VPC design, Direct Connect, PrivateLink, Route 53, NAT/egress patterns, and network firewalls.
Experience connecting cloud and on-premises environments, including hybrid connectivity, BGP and dynamic routing, IP address management, load balancers, and firewalls, as well as planning, deploying, and troubleshooting at scale.
Coding and automation skills in Python, Go, Java, or .NET.
Experience using infrastructure as code such as Terraform or similar, Git, CI/CD, and containers to build and operate network infrastructure.
Background in network engineering, SRE, DevOps, or software engineering, with hands-on public cloud networking experience.
Experience leading incident response and root cause analysis for high-impact failures that cross team boundaries.
Analytical mindset focused on root causes and continuous improvement.
English proficiency to read, write, and lead discussions across time zones.

Nice To Haves

Experience with Azure or GCP networking.

Responsibilities

Design and evolve connectivity patterns across multi-account, multi-region, and hybrid-cloud topologies, making architectural decisions across multiple teams.
Build and maintain the network platform as code using Terraform or similar tools, with standards for testing, code review, and reusable modules.
Own the operational health of the platform in scope, including leading incident response, driving postmortems, and addressing resulting technical debt.
Promote safe network changes through gradual rollouts, monitoring, and fast rollback.
Define platform observability, including monitoring and SLAs that surface issues before they affect customers.
Own the network security posture in scope, including segmentation and standards such as PCI DSS, with controls that withstand audits.
Simplify network topology through consolidation, deprecation, and paved roads while balancing scalability, maintainability, and cost.
Evaluate build-versus-buy decisions using data about stability, scalability, and cost.
Mentor other engineers, participate in hiring, and document decisions so knowledge can be shared across teams.