Staff Cloud Infrastructure Engineer

BILL•San Jose, CA

3h•Remote

About The Position

At BILL, we believe in empowering the businesses that drive our economy. By replacing outdated financial processes with innovative tools, we help businesses—from startups to established brands—make smarter decisions and gain control of their operations. And we don’t stop there: we’re creating the future of financial automation so businesses can spend more time on what matters. Working here means you become part of a vision-driven team that’s ready to tackle challenges and build cutting-edge solutions. We value purpose, drive, and curiosity—and we thrive in a fast-paced, ever-changing environment. Whether in one of our offices in San Jose, CA, Draper, UT, or working remotely, BILLders collaborate to deliver real impact for businesses that need more time in their busy weeks. BILL builds high performing teams and we seek to hire the best talent for every role. We're committed to building a workplace that fosters inclusion and diverse perspectives, valuing each person’s unique skills and experiences. We’d love to hear from you—you might be just what we’re looking for, whether in this role or another. ✨ Let’s give businesses more time for what matters. Make your impact within a rapidly growing Fintech Company The Core Infrastructure Engineering Team is responsible for managing all of the infrastructure and databases at BILL. We utilize DataDog (for Logging, Metrics, and APM), Splunk, and CloudWatch (through Datadog integration) for real-time alerts via Slack and PagerDuty. We're big supporters of automating our workflows with Infrastructure as Code, and we love using Terraform to make it happen. We are seeking a Staff Cloud Network Engineer to lead the design and evolution of our AWS network platform. This role is for a hands-on technical leader with deep expertise in AWS networking and infrastructure as code who will set standards, influence architecture, and drive scalable, secure networking solutions across the BILL application ecosystem. You will act as the go to expert for cloud networking, partnering closely with infrastructure, security, and product engineering teams to ensure our network enables performance, reliability, and growth.

Requirements

Minimum of 7 years of relevant experience in network engineering, with a significant portion of that experience specifically focused on designing, implementing, and managing network infrastructure in AWS or similar cloud environments.
Proven experience architecting and operating large-scale AWS network environments, including the design and implementation of hub-and-spoke and multi-region topologies using AWS Transit Gateways and AWS Cloud WAN for high availability, scalability, and cost optimization.
Hands-on experience designing inter-VPC and inter-account connectivity patterns (e.g., VPC peering, Transit Gateway attachments, Cloud WAN core networks, and routing domains), including segmentation strategies for production, staging, and non-production workloads.
Proficiency in Terraform or similar Infrastructure as Code (IaC) tools for automating network configuration, including reusable modules for VPCs, Transit Gateways, Cloud WAN segments, route tables, and security policies.
In-depth knowledge of networking protocols, including TCP/IP, BGP, OSPF, VLANs, VPNs, and DNS, with specialized experience managing Amazon Route 53 hosted zones and Cloudflare DNS/CDN configurations, and the ability to apply these in cloud-based architectures (e.g., dynamic routing over Direct Connect or site-to-site VPN integrated with Transit Gateway / Cloud WAN).
Strong understanding of network security principles and best practices, including firewalls, IDS/IPS, encryption, access control, and the application of these controls at the VPC, Transit Gateway, and Cloud WAN layers to enforce least-privilege and zero-trust patterns.
Experience with network monitoring and performance optimization tools such as CloudWatch, VPC Flow Logs, and AWS Direct Connect, including baselining, capacity planning, and proactive detection of routing and latency issues in large-scale topologies.
Ability to collaborate effectively with cross-functional teams, including Systems Engineers, Developers, Security, and Architects, to translate application and business requirements into resilient AWS network architectures.
Excellent troubleshooting and problem-solving skills, with a focus on identifying and resolving complex network issues across on-premises, Direct Connect, VPN, Transit Gateway, Cloud WAN, and VPC boundaries.
Strong communication skills and the ability to articulate network architecture and design decisions to both technical and non-technical stakeholders, including clear documentation of routing policies, segmentation models, and connectivity patterns.

Nice To Haves

AWS certification(s) such as AWS Certified Solutions Architect – Associate or AWS Certified Advanced Networking – Specialty is preferred.
Proven track record of designing and implementing scalable and resilient network solutions in a production environment, including multi-region failover, disaster recovery connectivity patterns, and change-managed rollouts using IaC.