This is a fully remote position, open to applicants in Mexico.

📋 Description

• Design, manage, and enhance the network across GCP and AWS, incorporating Shared VPC, VPC peering, Private Service Connect, Cloud NAT, Cloud VPN/Interconnect, and private DNS.

• Transition network infrastructure towards a centralized ingress/egress hub architecture.

• Codify network infrastructure using Terraform.

• Automate DNS records, firewall rules, and IP allowlists with Python or Go utilizing GitOps workflows, Bitbucket pull requests, and CI/CD pipelines.

• Manage Google Cloud Load Balancing, Cloud Armor, IAP, and NGINX-based private proxies on GKE.

• Apply edge policies established in collaboration with the Information Security team.

• Leverage VPC Flow Logs, Cloud Logging, and Datadog for diagnosing connectivity, latency, and DNS problems.

• Develop network alerts and dashboards, and take the lead on the network aspect of incident response.

• Collaborate effectively with Platform, DevOps, and Information Security teams.

• Document the network in runbooks and diagrams.

⛳️ Requirements

• A minimum of 2 years of experience in a Network Engineering, Cloud Engineering, or DevOps/SRE position with a strong emphasis on networking.

• Strong understanding of networking fundamentals: TCP/IP, subnetting/CIDR, routing (basic BGP), NAT, DNS, TLS, and HTTP.

• Practical experience with Infrastructure as Code (Terraform) and scripting in Python, Go, or Bash to automate network-related tasks.

• Hands-on experience with cloud networking on GCP and/or AWS (including VPCs, firewall rules/security groups, load balancers, private connectivity, and VPN).

• Familiarity with Kubernetes networking (including Services, Ingress, and NetworkPolicies), reverse proxies like NGINX, and edge controls such as Cloud Armor or AWS WAF.

• Exceptional communication and documentation abilities, a desire for continuous growth, and a strong sense of ownership.