Principal Engineer, Platform Engineering

Position overview

SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of the network foundations supporting our engineering organization.

This is a senior hands-on technical role spanning cloud networking, site reliability engineering, infrastructure automation, and platform architecture across AWS, GCP, Azure, and internal infrastructure.

The ideal candidate combines deep networking expertise with strong software and infrastructure engineering skills. They should be comfortable operating across organizational boundaries, driving technical decisions, improving reliability, and identifying adjacent problems that need ownership rather than limiting themselves strictly to a predefined scope.

This role also provides senior technical coverage during U.S. business hours and acts as a key architecture partner to Platform Engineering, Systems Engineering, IT, InfoSec, and product engineering teams.

What you'll do

• Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure.
• Design and evolve routing, segmentation, firewalls, NAT, ingress/egress, DNS, VPN, private connectivity, and cloud-to-data-center networking.
• Lead technical direction for private-access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns.
• Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services.
• Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation.
• Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies.
• Build reusable infrastructure patterns and automation that enable safe self-service for platform and engineering teams.
• Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices.
• Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture that crosses networking, infrastructure, identity, security, and reliability domains.
• Serve as a senior technical escalation point during U.S. business hours.
• Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject-matter experts.
• Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization.
• Identify architectural and operational gaps beyond the immediate networking domain and help drive them to resolution.

Your Experience

• Deep experience designing and operating complex production cloud networks in at least one major cloud provider, with meaningful experience in a second.
• Strong knowledge of routing, subnetting, segmentation, firewalls, NAT, DNS, VPN, ingress/egress, and private connectivity.
• Demonstrated experience troubleshooting complex production network and infrastructure failures.
• Strong hands-on experience with Terraform, OpenTofu, Terragrunt, or comparable infrastructure-as-code technologies.
• Experience building infrastructure automation using Python, Go, or a comparable programming language.
• Strong SRE experience including observability, incident response, root-cause analysis, recovery engineering, and reliability improvement.
• Experience operating Kubernetes or adjacent cloud-platform infrastructure.
• Experience designing safe infrastructure change and deployment practices.
• Ability to lead architecture decisions across multiple engineering organizations without formal authority.
• Strong written and verbal communication skills, including architecture documents, standards, runbooks, and incident reviews.
• Demonstrated ability to mentor engineers, distribute technical knowledge, and influence technical direction at Principal level.

Preferred Qualifications

• Experience across AWS, GCP, and Azure.
• AWS Transit Gateway, Cloud WAN, Direct Connect, PrivateLink, Route 53, or equivalent cloud-network technologies.
• GCP Cloud Router, Interconnect, Shared VPC, Private Service Connect, or equivalent technologies.
• Azure Virtual WAN, ExpressRoute, Private Link, or equivalent technologies.
• BGP and hybrid cloud/data-center networking.
• Tailscale, Headscale, WireGuard, or comparable private-access technologies.
• NetBox or other IPAM/DCIM platforms.
• Kubernetes CNI or advanced Kubernetes networking experience.
• Grafana, Prometheus, Mimir, Loki, CloudWatch, PagerDuty, Pingdom, or comparable observability tools.
• Experience with IAM and identity technologies such as Okta, Keycloak, FreeIPA, OIDC, SAML, SCIM, JIT access, certificates, secrets management, or privileged-access systems.
• Experience building policy-as-code, infrastructure guardrails, or automated deployment controls.
• Experience in large multi-account, multi-project, hybrid-cloud, or enterprise-scale infrastructure environments.