We are seeking a highly skilled Senior Cloud Networking Engineer to join our Network and Workforce Engineering team. In this role, you will work alongside a team of highly talented engineers to design, deploy, and optimize multi-region AWS networks and complex Kubernetes environments. The ideal candidate will be passionate about building scalable, secure, and resilient cloud infrastructure and thrive in a collaborative, fast-paced environment.
This is a Hybrid position based in Frisco, TX. You must be within a commutable distance to the Frisco location. You will be required to be onsite on an as-needed basis; when not working onsite, you will work remotely from your home location.

About the Role

• Collaborate with engineering peers to design and deploy multi-region AWS networking solutions, including VPCs, Transit Gateways, Direct Connect, and VPNs.
• Contribute to the architecture and implementation of complex Kubernetes environments, including CNI plugins (e.g., Calico, Cilium), ingress controllers, service meshes (Istio, Kong), and network policies.
• Implement and maintain high-availability and disaster recovery strategies across cloud regions.
• Work closely with Product teams, Site Reliability Engineering (SRE) teams, and the Technology Services Cloud Engineering team to align infrastructure with business and operational goals.
• Enforce network security best practices and compliance standards in partnership with Security and DevOps teams.
• Monitor and troubleshoot network performance, latency, and connectivity issues.
• Automate network provisioning and configuration using Infrastructure as Code (IaC) tools such as Terraform or AWS CloudFormation.
• Provide mentorship and technical guidance to junior engineers.

About You

• 5+ years of hands-on experience deploying and managing complex Kubernetes environments.
• 8+ years of experience in cloud networking, with a strong focus on AWS.
• Proven track record of multi-region AWS network deployments.
• Proficiency in Terraform, CloudFormation, or similar IaC tools.
• Strong knowledge of routing protocols, DNS, load balancing, and firewall configurations.
• Experience with monitoring and observability tools (e.g., Prometheus, Grafana, AWS CloudWatch).
• Excellent problem-solving and communication skills.
• AWS Certified Advanced Networking – Specialty.
• Experience with Istio and Kong service mesh technologies.
• Familiarity with hybrid cloud and on-prem integration strategies.
• Experience building Internal Development Platforms with tools such as backstage.
• Experience with Web Application Firewalls, both AWS native and Kubernetes based such as open-appsec
• Experience with overlay networks/SDN (VXLAN, GENEVE, etc.) and network segmentation strategies
• Expertise in East-West traffic security and zero-trust networking
• Fine-grained API gateway security implementation (rate limiting, JWT validation, mTLS)
• Experience with OWASP API Security Top 10 mitigations
• Service-to-service authentication and authorization (SPIFFE/SPIRE, OPA)
• Production experience with eBPF for observability and security
• eBPF-based observability tools (Pixie, Hubble)
• Deep understanding of Cilium’s eBPF-based networking and network policies
• Runtime security with Falco or similar tools
• Distributed tracing (Jaeger, Tempo, X-Ray)
• Production debugging of complex networking issues at scale
• Experience with Gitops and CI/CD workflows and “Policy-as-Code”