Principal Engineer, Platform Engineering

SingleStore-LinkedIn; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of the network foundations supporting our engineering organization. This senior role spans cloud networking, site reliability engineering, infrastructure automation, and platform architecture across AWS, GCP, Azure, and internal infrastructure.

The ideal candidate combines deep networking expertise with strong software and infrastructure engineering skills, and is

Qualifications

• Deep experience designing and operating complex production cloud networks in at least one major cloud provider, with meaningful experience in a second.
• Strong knowledge of routing, subnetting, segmentation, firewalls, NAT, DNS, VPN, ingress/egress, and private connectivity.
• Demonstrated experience troubleshooting complex production network and infrastructure failures.
• Strong hands‑on experience with Terraform, OpenTofu, Terragrunt, or comparable infrastructure‑as‑code technologies.
• Experience building infrastructure automation using Python, Go, or a comparable programming language.
• Strong SRE experience including observability, incident response, root‑cause analysis, recovery engineering, and reliability improvement.
• Experience operating Kubernetes or adjacent cloud‑platform infrastructure.
• Experience designing safe infrastructure change and deployment practices.
• Ability to lead architecture decisions across multiple engineering organizations without formal authority.
• Strong written and verbal communication skills, including architecture documents, standards, runbooks, and incident reviews.
• Demonstrated ability to mentor engineers, distribute technical knowledge, and influence technical direction at Principal level.

Responsibilities

• Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure.
• Design and evolve routing, segmentation, firewalls, NAT, ingress/egress, DNS, VPN, private connectivity, and cloud‑to‑data‑center networking.
• Lead technical direction for private‑access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns.
• Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services.
• Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation.
• Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies.
• Build reusable infrastructure patterns and automation that enable safe self‑service for platform and engineering teams.
• Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices.
• Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture that crosses networking, infrastructure, identity, security, and reliability domains.
• Serve as a senior technical escalation point during U.S. business hours.
• Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject‑matter experts.
• Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization.
• Identify architectural and operational gaps beyond the immediate networking domain and help drive them to resolution.

Skills

Cloud networking

Site Reliability Engineering

IaC automation

Terraform/OpenTofu

Terragrunt

Python/Go

Kubernetes

Networking troubleshooting

Cross-organizational leadership

Architecture documentation

Tools

Terraform/OpenTofu

Terragrunt

Python

Go

Kubernetes

Job description

United States

Position overview

SingleStore is seeking a Principal Cloud Network & Reliability Engineer to lead the architecture, reliability, and automation of the network foundations supporting our engineering organization.

This is a senior hands‑on technical role spanning cloud networking, site reliability engineering, infrastructure automation, and platform architecture across AWS, GCP, Azure, and internal infrastructure.

The ideal candidate combines deep networking expertise with strong software and infrastructure engineering skills. They should be comfortable operating across organizational boundaries, driving technical decisions, improving reliability, and identifying adjacent problems that need ownership rather than limiting themselves strictly to a predefined scope.

This role also provides senior technical coverage during U.S. business hours and acts as a key architecture partner to Platform Engineering, Systems Engineering, IT, InfoSec, and product engineering teams.

What you’ll do:

• Define cloud networking architecture and standards across AWS, GCP, Azure, and internal infrastructure.
• Design and evolve routing, segmentation, firewalls, NAT, ingress/egress, DNS, VPN, private connectivity, and cloud‑to‑data‑center networking.
• Lead technical direction for private‑access technologies such as Tailscale, Headscale, WireGuard, bastions, and related access patterns.
• Establish SLOs, monitoring, alerting, recovery procedures, and operational standards for critical network services.
• Lead diagnosis and mitigation of significant networking, connectivity, and infrastructure incidents, and drive permanent remediation.
• Develop and maintain infrastructure using Terraform, OpenTofu, Terragrunt, Python, Go, or comparable technologies.
• Build reusable infrastructure patterns and automation that enable safe self‑service for platform and engineering teams.
• Improve infrastructure change safety through automated validation, required review, observability, change logging, and rollback practices.
• Partner with Cloud Platform, Developer Platform, Systems Engineering, IT, InfoSec, and SRE teams on architecture that crosses networking, infrastructure, identity, security, and reliability domains.
• Serve as a senior technical escalation point during U.S. business hours.
• Create architecture standards, decision records, runbooks, and operational practices that reduce dependency on individual subject‑matter experts.
• Mentor engineers and raise networking, infrastructure, and reliability expertise across the organization.
• Identify architectural and operational gaps beyond the immediate networking domain and help drive them to resolution.

Your Experience:

• Deep experience designing and operating complex production cloud networks in at least one major cloud provider, with meaningful experience in a second.
• Strong knowledge of routing, subnetting, segmentation, firewalls, NAT, DNS, VPN, ingress/egress, and private connectivity.
• Demonstrated experience troubleshooting complex production network and infrastructure failures.
• Strong hands‑on experience with Terraform, OpenTofu, Terragrunt, or comparable infrastructure‑as‑code technologies.
• Experience building infrastructure automation using Python, Go, or a comparable programming language.
• Strong SRE experience including observability, incident response, root‑cause analysis, recovery engineering, and reliability improvement.
• Experience operating Kubernetes or adjacent cloud‑platform infrastructure.
• Experience designing safe infrastructure change and deployment practices.
• Ability to lead architecture decisions across multiple engineering organizations without formal authority.
• Strong written and verbal communication skills, including architecture documents, standards, runbooks, and incident reviews.
• Demonstrated ability to mentor engineers, distribute technical knowledge, and influence technical direction at Principal level.

Preferred Qualifications:

• Experience across AWS, GCP, and Azure.
• AWS Transit Gateway, Cloud WAN, Direct Connect, PrivateLink, Route 53, or equivalent cloud‑network technologies.
• GCP Cloud Router, Interconnect, Shared VPC, Private Service Connect, or equivalent technologies.
• BGP and hybrid cloud/data‑center networking.
• Tailscale, Headscale, WireGuard, or comparable private‑access technologies.
• NetBox or other IPAM/DCIM platforms.
• Grafana, Prometheus, Mimir, Loki, CloudWatch, PagerDuty, Pingdom, or comparable observability tools.
• Experience with IAM and identity technologies such as Okta, Keycloak, FreeIPA, OIDC, SAML, SCIM, JIT access, certificates, secrets management, or privileged‑access systems.
• Experience building policy‑as‑code, infrastructure guardrails, or automated deployment controls.
• Experience in large multi‑account, multi‑project, hybrid‑cloud, or enterprise‑scale infrastructure environments.

About us:

SingleStore delivers the cloud‑native database with the speed and scale to power the world’s data‑intensive applications. With a distributed SQL database that introduces simplicity to your data architecture by unifying transactions and analytics, SingleStore empowers digital leaders to deliver exceptional, real‑time data experiences to their customers. SingleStore is venture‑backed and headquartered in San Francisco with offices in Sunnyvale, Raleigh, Seattle, Boston, London, Lisbon, Bangalore, Dublin and Kyiv.

SingleStore values individuals for their unique skills and experiences, and we’re proud to offer roles in a variety of locations across the United States. Salary is based on permissible, non‑discriminatory factors such as skills, experience, and geographic location, and is just one part of our total compensation and benefits package.
For candidates residing in California, please see our California Recruitment Privacy Notice. For candidates residing in the EEA, UK, and Switzerland, please see our EEA, UK, and Swiss Recruitment Privacy Notice.

Consistent with our commitment to diversity & inclusion, we value individuals with the ability to work on diverse teams and with a diverse range of people.

As set forth in SingleStore-LinkedIn’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.