Principal Systems Engineer

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 
 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive.

About F5

At F5, we strive to bring a better digital world to life. Our teams empower organizations across the globe to create, secure, and run applications that enhance how we experience our evolving digital world. We are passionate about cybersecurity, from protecting consumers from fraud to enabling companies to focus on innovation. 

Everything we do centers around people. That means we obsess over how to make the lives of our customers, and their customers, better. And it means we prioritize a diverse F5 community where each individual can thrive. 

Position Summary

We’re looking for a Cloud Infrastructure/Platform Engineer to build and operate a secure, scalable cloud “landing zone” and platform foundations. You’ll define and automate FinOps and Security governance using policy-as-code, create reusable infrastructure-as-code (IaC) libraries, and enable teams through CI/CD pipelines and GitOps practices. You should bring deep hands-on expertise in at least one major cloud (Azure or AWS preferred), with additional experience in GCP, OCI, or IBM Cloud as a plus.

Key Responsibilities

• Design, build, and operate cloud landing zones (multi-account/subscription, org structure, network, identity, logging, security baselines).
• Implement governance and guardrails using policy-as-code (e.g., Azure Policy, AWS Organizations/SCPs, OPA/Conftest), including exception handling and auditability.
• Define and deploy FinOps observability and enforcement tooling to enable DevOps teams to operate efficiently as well as cross-account financial oversight.
• Deliver an infrastructure platform as a product to the internal development community.
• Develop reusable IaC modules/libraries (Terraform primary; Bicep/ARM and CloudFormation also valued) and promote standard patterns for teams.
• Build and maintain CI/CD pipelines for infrastructure, OS Images, containers, and platform components using GitOps workflows (PR-based changes, automated validation, progressive delivery).
• Standardize environments (dev/test/prod) with consistent controls, tagging/metadata, and cost management guardrails.
• Embed security and compliance into build/deploy: secret handling, encryption, IAM least privilege, vulnerability scanning, and evidence generation.
• Observability and SRE practices: implement monitoring/alerting and dashboards, support incident response, and help define/track SLIs/SLOs for platform services.
• Collaborate in an agile delivery model; participate in planning, refinement, and execution (SAFe experience is a bonus).

Required Qualifications

• Deep hands-on experience engineering cloud infrastructure on one or more of Azure, AWS, and GCP (architecture + implementation).
• Strong proficiency with Infrastructure as Code (Terraform primary; Bicep/ARM and CloudFormation).
• Specific background in cloud cost optimization and FinOps practices, including Savings Plans, Reserved Instances, native cloud cost management tools, and policy-based cost controls.
• Proven experience implementing landing zones / foundational cloud platforms (identity, network, shared services, governance).
• Experience with policy-as-code and automated compliance (e.g., Azure Policy, AWS Config + SCPs, OPA/Conftest).
• CI/CD expertise for infrastructure: pipeline design, testing/validation, approvals, environment promotion, drift detection.
• Working knowledge of configuration management/automation in current-state enterprise environments (e.g., Ansible and Puppet).
• Strong understanding of IAM, network security, encryption, key management, and secure-by-default patterns.
• Comfortable with Git-based workflows (PR reviews, branching strategies, versioning, release management).
• Scripting/programming ability (e.g., Python, Bash, PowerShell, Go) to build automation and tooling.

• Preferred Qualifications (Nice to Have)

• Experience with Oracle Cloud (OCI)
• Experience with Cloud Financial Management (FinOps) and implementing FinOps policies using automation (“Policy as Code”)
• Strong Network Engineering background including cloud and hybrid-cloud connectivity, network security policy automation, and cloud native network architectures.
• Experience working in hybrid environments to deliver platform automation solutions in the Data Center.
• Familiarity with security and control frameworks such as NIST CSF, NIST 800-171, SOX, SOC 2, and ISO 27002.
• Kubernetes/platform experience (AKS/EKS/GKE/OKE), service mesh, or container platform operations.
• Experience with platform engineering concepts: developer portals/catalogs, golden paths, internal products.
• Familiarity with observability stacks: native CSP tooling, Datadog, Splunk, LogicMonitor
• SAFe or other structured agile delivery framework experience (PI planning, ARTs, epics/features).

The Job Description is intended to be a general representation of the responsibilities and requirements of the job. However, the description may not be all-inclusive, and responsibilities and requirements are subject to change.

Please note that F5 only contacts candidates through F5 email address (ending with @f5.com) or auto email notification from Workday (ending with f5.com or @myworkday.com).

Equal Employment Opportunity

It is the policy of F5 to provide equal employment opportunities to all employees and employment applicants without regard to unlawful considerations of race, religion, color, national origin, sex, sexual orientation, gender identity or expression, age, sensory, physical, or mental disability, marital status, veteran or military status, genetic information, or any other classification protected by applicable local, state, or federal laws. This policy applies to all aspects of employment, including, but not limited to, hiring, job assignment, compensation, promotion, benefits, training, discipline, and termination.  F5 offers a variety of reasonable accommodations for candidates. Requesting an accommodation is completely voluntary. F5 will assess the need for accommodations in the application process separately from those that may be needed to perform the job. Request by contacting [email protected].