Principal Cloud Network Engineer

Overview

About Business Unit:

At the core of all that Epsilon does is a team that sets the foundation of our IT infrastructure. The team drives innovation and efficiency through pioneering technology across Epsilon's platforms and business verticals. From being the first point of contact for infrastructure needs to final deployment, the team provides end-to-end solutions for our client-facing platforms. ETS supports all aspects of revenue-generating platforms for Epsilon and sets the architectural direction for our enterprise deployments. By adopting the newest technologies, such as Cloud, Automation, and Artificial Intelligence, the team is at the front of redefining our digital business and capturing new opportunities.

As a Principal Cloud Network Engineer, you will define and drive Epsilon's enterprise cloud and hybrid network architecture across AWS, GCP, and Azure. You will set the technical direction for multi-account, multi-region connectivity—replacing legacy datacenter patterns with modern cloud-native equivalents such as Transit Gateway and VPC Lattice, Private Service Connect, Route 53 Resolver endpoints, cloud WAF/CDN edge controls, and zero-trust connectivity models at enterprise scale.

In this role, you partner with Cloud Engineering, Security, Platform, and Application leadership to establish network standards, landing zone designs, and operational models that support reliable connectivity for revenue-generating platforms in 24x7x365 environments. You develop and champion Python-based automation and API driven network services that give teams consistent, repeatable outcomes at scale. You lead resolution of the most complex hybrid and multi-cloud network issues, define observability and SLO frameworks for network services, and mentor senior engineers and architects on cloud networking guidelines. You delegate implementation work across the team while remaining hands-on on the highest-impact architecture and critical issue scenarios.

Your work directly shapes uptime, security posture, cost efficiency, and developer velocity across internal and client-facing platforms—and establishes the network foundation for Epsilon's continued cloud and AI-enabled growth.

This role is ideal for a principal-level practitioner who combines expert networking fundamentals with deep multi-cloud expertise, infrastructure-as-code field, Python-based automation, and a track record of building secure, observable, and automatable network platforms— including APIs that give the business consistent, repeatable outcomes—while developing others.

Click here to view how Epsilon transforms marketing with 1 View, 1 Vision and 1 Voice.

Responsibilities

Enterprise Network Architecture:

• Define and evolve Epsilon's enterprise cloud network architecture across AWS, GCP, and Azure—including hub-and-spoke, mesh, and centralized egress models (e.g., AWS Transit Gateway, GCP VPC Network Connectivity Center, Azure Virtual WAN).
• Establish multi-account landing zone network standards (AWS Organizations, GCP folders/projects, Azure Management Groups)—including shared services connectivity, centralized inspection, and cross-environment routing policy.
• Design private service access patterns at scale: AWS VPC Lattice / PrivateLink, GCP Private Service Connect, Azure Private Link—enabling secure east-west and north-south traffic without exposing services to the public internet.
• Architect zero-trust network access (ZTA) and identity-aware connectivity patterns alongside traditional segmentation controls; align network design with enterprise security strategy.
• Evaluate emerging cloud networking capabilities and drive adoption aligned to business outcomes, cost targets, and operational maturity.

Hybrid Connectivity & DNS:

• Own hybrid connectivity strategy using Direct Connect, ExpressRoute, Cloud Interconnect, VPN, and modern overlay patterns; optimize for resilience, latency, throughput, and cost across production and DR topologies.
• Define and govern enterprise DNS strategy in the cloud: Route 53 hosted zones and Resolver endpoints/rules, Private DNS, split-horizon resolution, forwarding to on-premises, and GCP Cloud DNS / Private DNS zones integrated with Private Service Connect.
• Lead design reviews for complex routing, BGP, and cross-cloud connectivity scenarios; resolve architectural conflicts between network, security, and application requirements.

Edge Security & Segmentation:

• Define standards for edge and application-layer security controls including AWS WAF, AWS Shield, CloudFront, GCP Cloud Armor, Azure Front Door / Application Gateway WAF, and integration with security tooling and SIEM.
• Establish network segmentation and micro-segmentation models using security groups, NACLs, cloud firewall policies (e.g., AWS Network Firewall, GCP Firewall Policies, Azure Firewall), and policy-as-code where applicable.
• Partner with Security on DDoS mitigation strategy, TLS/certificate lifecycle at scale, egress filtering, threat detection integration, and compliance requirements (segmentation, logging retention, audit readiness).

Platform, Automation & Observability:

• Drive infrastructure-as-code standards (Terraform preferred) for repeatable, auditable network provisioning; govern CI/CD pipelines and change workflows for network modifications at scale.
• Develop and support network automation in Python—building tooling, integrations, and services that expose APIs to the business for consistent, repeatable network outcomes (provisioning, validation, connectivity requests, and operational workflows).
• Design self-service and platform automation patterns that reduce manual toil, enforce standards, and scale network capabilities across engineering and product teams.
• Define network observability architecture—Flow Logs, VPC Reachability Analyzer, Cloud Monitoring, synthetic probes, and alerting frameworks tied to SLOs and error budgets.
• Champion automation, self-service network patterns, and operational maturity (ITIL-aligned change, incident, and problem management) across the network engineering function.
• Guide platform networking for container and Kubernetes workloads (EKS/GKE/AKS CNI, service mesh integration) and high-throughput data platform connectivity.

Operational Leadership & Delivery:

• Lead and drive network modernization and platform initiatives—prioritize workstreams, set technical direction, and ensure delivery against enterprise connectivity goals.
• Mentor senior network engineers, cloud engineers, and peer architects on complex design, troubleshooting methodology, and architectural decision-making.
• Delegate and coordinate implementation and operational tasks across the network team and partner groups—clear ownership, quality standards, and follow-through.
• Lead incident command and root-cause analysis for the most complex connectivity, DNS, TLS, and performance issues across hybrid and multi-cloud environments; drive problem management and blameless postmortems.
• Own network documentation, architecture diagrams, runbooks, and enterprise standards; lead architecture reviews and well-architected assessments.
• Apply FinOps principles to network cost strategy—NAT gateway, data transfer, egress, interconnect, and edge service optimization at portfolio level.
• Participate in on-call rotation and provide after-hours support for critical network incidents as required.
• Additional responsibilities as assigned.

Qualifications

Who You Are:

A principal cloud network engineer and technical leader who operates at the intersection of enterprise architecture, multi-cloud engineering, and operational excellence. You think in terms of landing zones, routing policy, and trust boundaries—not just individual VPCs and firewall rules. You are equally comfortable setting enterprise standards, building Python automation that exposes APIs for repeatable delivery, leading incident command on a SEV-1, and mentoring senior engineers through a complex BGP or DNS issue. You delegate effectively, stay accountable for outcomes, and remain hands-on on the problems that define the architecture.

What you'll bring with you:

• 10+ years of experience in network engineering or infrastructure roles, with 5+ years focused on cloud networking in large-scale production environments.
• Expert-level understanding of TCP/IP, routing, switching, BGP, VPN, DNS, TLS, and load balancing—applied across cloud, hybrid, and multi-cloud contexts.
• Deep hands-on experience designing and operating AWS networking (VPC, Transit Gateway, Direct Connect, Route 53 / Resolver, PrivateLink, VPC Lattice, Network Firewall, WAF, CloudFront) and comparable services in GCP and Azure.
• Solid experience with GCP Private Service Connect, Cloud DNS, Cloud Armor, VPC peering/shared VPC and Azure Virtual WAN, Private Link, Application Gateway WAF, and Azure Firewall.
• Demonstrated success designing and operating large-scale multi-account landing zones with centralized egress, shared services, and cross-account connectivity governance.
• Expert proficiency with infrastructure-as-code (Terraform preferred), version-controlled network change workflows, and policy-as-code for network security controls.
• Strong Python development experience—building or supporting automation, integrations, and API driven services that deliver consistent, repeatable network outcomes for internal teams and business consumers.
• Experience defining network observability, SLOs, capacity planning, and operational metrics for highly available, multi-region services.
• Demonstrated ability to lead technical initiatives, mentor senior engineers and peers, and delegate work while maintaining architecture quality and operational standards.
• Ability to lead troubleshooting across all layers (DNS, TLS, routing, NAT, firewall policy, application) and communicate clearly to executive, technical, and operational partners.
• Demonstrated success in regulated or security-sensitive environments with change management, least-privilege access, and audit-ready documentation.
• Self-directed with strong prioritization skills in high-volume, 24x7 operational contexts.
• Willingness to participate in after-hours on-call rotation.

Why you might stand out from other talent:

• Multi-cloud certifications (e.g., AWS Advanced Networking Specialty, GCP Professional Cloud Network Engineer, Azure Network Engineer Associate) or equivalent demonstrated expertise across all three major clouds.
• Experience architecting zero-trust network access (ZTA), SASE, or identity-aware proxy patterns at enterprise scale alongside traditional network controls.
• Deep experience with service mesh, container networking (EKS/GKE/AKS CNI), or platform networking for Kubernetes and microservices at scale.
• Track record building network automation platforms and APIs—self-service connectivity, validation tooling, or workflow services used by multiple engineering and business teams.
• Advanced automation skills beyond Python (Bash, Go, or similar) for network operations, drift detection, and continuous compliance validation.
• Experience leading multi-functional network transformation programs—datacenter exit, multi-cloud expansion, or landing zone modernization with measurable outcomes.
• Background in NOC, SRE, or incident command roles with demonstrated operational rigor under high-severity production events.
• Contributions to enterprise standards, training programs, or platform initiatives that materially improved reliability, security posture, or developer experience.
• Familiarity with AI/ML platform networking requirements—high-throughput, low-latency, or GPU cluster connectivity patterns in cloud environments.

Additional Information

Epsilon is a global data, technology and services company that powers the marketing and advertising ecosystem. For decades, we’ve provided marketers from the world’s leading brands the data, technology and services they need to engage consumers with 1 View, 1 Vision and 1 Voice. 1 View of their universe of potential buyers. 1 Vision for engaging each individual. And 1 Voice to harmonize engagement across paid, owned and earned channels.

Epsilon’s comprehensive portfolio of capabilities across our suite of digital media, messaging and loyalty solutions bridge the divide between marketing and advertising technology. We process 400+ billion consumer actions each day using advanced AI and hold many patents of proprietary technology, including real-time modeling languages and consumer privacy advancements. Thanks to the work of every employee, Epsilon has been consistently recognized as industry-leading by Forrester, Adweek and the MRC. Epsilon is a global company with more than 9,000 employees around the world.

Our pillars aren't just words. They're how we show up every day.

• People centricity: We focus on employee well-being in an environment where colleagues truly care about each other.
• Collaboration: We work together, support one another, and collectively achieve goals.
• Growth: There are endless opportunities for growth through learning, development and career advancement.
• Innovation: We drive progress through cutting-edge solutions and forward-thinking approaches.
• Flexibility: We’ve created a balance between work and personal life, and we encourage adaptability to solve problems creatively.

Our values guide us to create value for our clients, our people and consumers.

• Act with integrity
• Work together to win together
• Innovate with purpose
• Respect all voices
• Empower with accountability

These pillars and values are our foundation—shaping our culture, guiding our decisions, and uniting us in common purpose.

Epsilon is an Equal Opportunity Employer. 
Epsilon is committed to promoting diversity, inclusion, and equal employment opportunities by using reasonable efforts to attract, recruit, engage and retain qualified individuals of all ethnicities and backgrounds, including, but not limited to, women, people of color, LGBTQ individuals, people with disabilities and any other underrepresented groups, traits or characteristics.