Senior Cloud Network Engineer

PayPal•San Jose, CA

About The Position

Oversee load balancers, Global Server Load Balancing (GSLB) equipment, Content Delivery Network (CDN) platforms, and troubleshoot client/server issues. Handle proactive and reactive outages, work with vendors, and take ownership of network incidents, escalations, and root cause analysis. Lead backbone network design and architecture for on-premises and public cloud migration, and build hybrid connectivity solutions. Work with business unit leadership, product managers, and customers to develop project objectives, timelines, and feature requirements. Support network system availability, manage network capacity, and ensure compliance with Information Security standards. Deploy equipment, manage SSL certificate hosting and renewal, and build infrastructure for data centers and cloud environments. Implement and continually improve operational procedures, systems, and network engineering best practices. Manage and influence global teams, provide guidance and support, and mentor team members in areas of expertise. 3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience. Proficiency with leading public cloud providers network services -AWS and GCP is a must, and experience with Azure is desirable. Deep hands-on experience with Terraform for network automation, infrastructure provisioning, CI/CD pipelines, and cloud resource lifecycle management. Strong experience with open-source load balancers, especially HAProxy, including configuration, tuning, observability, and deployment automation. Experience with Kubernetes networking, including Ingress, Service Mesh, CNI plugins. Deep hands-on expertise in cloud networking: VPC Network, Direct Connect, Transit Gateway, Direct Connect Gateway, Interconnect, Cloud Router, VPN, and firewall rules (Security Groups, GCP Firewall). PrivateLink and Private Service Connect (PSC) for secure and scalable service exposure. Use Infrastructure as Code processes to automate and maintain infrastructure consistency, scalability, and up-to-date configurations. Implement and manage network security controls using Palo Alto and Fortinet firewalls, VPNs, etc in public Cloud environments. Strong understanding of networking protocols and technologies, including TCP/IP, BGP, OSPF, MPLS, DNS, VPN. Utilize network monitoring tools (e.g. LogicMonitor, Datadog, AWS Cloudwatch, Splunk, Catchpoint, Nagios, etc.) to proactively identify and resolve network issues. Implement network changes following established change management procedures, minimizing risk and ensuring minimal impact to production services. Participate in incident management processes, including troubleshooting, root cause analysis, and post-incident reviews. Adhere to security policies, procedures, and best practices, ensuring the network infrastructure meets all compliance requirements. Implement and continually improve operational procedures, systems, and network engineering best practices. Provide Tier 2 support for network incidents impacting our production systems, ensuring timely resolution and minimal disruption to service. This includes on-call rotation responsibilities. Excellent troubleshooting and problem-solving skills.

Requirements

3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience.
Proficiency with leading public cloud providers network services -AWS and GCP is a must, and experience with Azure is desirable.
Deep hands-on experience with Terraform for network automation, infrastructure provisioning, CI/CD pipelines, and cloud resource lifecycle management.
Strong experience with open-source load balancers, especially HAProxy, including configuration, tuning, observability, and deployment automation.
Experience with Kubernetes networking, including Ingress, Service Mesh, CNI plugins.
Deep hands-on expertise in cloud networking: VPC Network, Direct Connect, Transit Gateway, Direct Connect Gateway, Interconnect, Cloud Router, VPN, and firewall rules (Security Groups, GCP Firewall).
PrivateLink and Private Service Connect (PSC) for secure and scalable service exposure.
Use Infrastructure as Code processes to automate and maintain infrastructure consistency, scalability, and up-to-date configurations.
Strong understanding of networking protocols and technologies, including TCP/IP, BGP, OSPF, MPLS, DNS, VPN.
Excellent troubleshooting and problem-solving skills.

Nice To Haves

Relevant AWS and/or GCP Networking certifications
Foundational networking certifications (e.g., CCNA, CCNP, JNCIA, JNCIS).
Experience with container networking (e.g., Kubernetes, Docker).
Experience with penetration testing and vulnerability assessments and remediation.
Experience in the financial services industry.
Experience with Agile/Scrum methodologies.
Contributions to open-source networking projects.

Responsibilities

Oversee load balancers, Global Server Load Balancing (GSLB) equipment, Content Delivery Network (CDN) platforms, and troubleshoot client/server issues.
Handle proactive and reactive outages, work with vendors, and take ownership of network incidents, escalations, and root cause analysis.
Lead backbone network design and architecture for on-premises and public cloud migration, and build hybrid connectivity solutions.
Work with business unit leadership, product managers, and customers to develop project objectives, timelines, and feature requirements.
Support network system availability, manage network capacity, and ensure compliance with Information Security standards.
Deploy equipment, manage SSL certificate hosting and renewal, and build infrastructure for data centers and cloud environments.
Implement and continually improve operational procedures, systems, and network engineering best practices.
Manage and influence global teams, provide guidance and support, and mentor team members in areas of expertise.
Implement and manage network security controls using Palo Alto and Fortinet firewalls, VPNs, etc in public Cloud environments.
Utilize network monitoring tools (e.g. LogicMonitor, Datadog, AWS Cloudwatch, Splunk, Catchpoint, Nagios, etc.) to proactively identify and resolve network issues.
Implement network changes following established change management procedures, minimizing risk and ensuring minimal impact to production services.
Participate in incident management processes, including troubleshooting, root cause analysis, and post-incident reviews.
Adhere to security policies, procedures, and best practices, ensuring the network infrastructure meets all compliance requirements.
Provide Tier 2 support for network incidents impacting our production systems, ensuring timely resolution and minimal disruption to service. This includes on-call rotation responsibilities.